&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r3, r7, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000180)=@nfc, 0x0, 0x80800}, 0xfffffffd) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2403.993701][T28440] loop1: detected capacity change from 0 to 140 [ 2404.070417][T28440] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2404.103921][T28440] EXT4-fs (loop1): get root inode failed [ 2404.109720][T28440] EXT4-fs (loop1): mount failed 08:24:20 executing program 4: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x8, 0x3f, 0x8000, 0x8601]}, &(0x7f00000002c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'ip_vti0\x00', 0x7}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @initdev}, &(0x7f0000000100)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x18, r2, 0x147, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0) (async) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x654}, 0x100) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth1\x00') 08:24:20 executing program 5: syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x9e, &(0x7f0000000180)={0x0, 0xecc5, 0x24, 0x3, 0x366}, &(0x7f00009a6000/0x3000)=nil, &(0x7f000041f000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f00009d5000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000a48000/0x1000)=nil, 0x1000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) 08:24:20 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) splice(r0, 0x0, r2, 0x0, 0x3e, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f, 0x1, 0x0, 0x0, 0xffb6, 0xb}, 0x20) 08:24:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'geneve0\x00', 0x1}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) 08:24:20 executing program 5: syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x9e, &(0x7f0000000180)={0x0, 0xecc5, 0x24, 0x3, 0x366}, &(0x7f00009a6000/0x3000)=nil, &(0x7f000041f000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f00009d5000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000a48000/0x1000)=nil, 0x1000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x9e, &(0x7f0000000180)={0x0, 0xecc5, 0x24, 0x3, 0x366}, &(0x7f00009a6000/0x3000)=nil, &(0x7f000041f000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f00009d5000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000a48000/0x1000)=nil, 0x1000, 0x3}, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) 08:24:20 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 08:24:20 executing program 4: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x8, 0x3f, 0x8000, 0x8601]}, &(0x7f00000002c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'ip_vti0\x00', 0x7}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x8, 0x3f, 0x8000, 0x8601]}, &(0x7f00000002c0)=0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'ip_vti0\x00', 0x7}) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:20 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = dup2(r2, r2) fallocate(r3, 0x62, 0xc7a0, 0x4) sendto$inet6(r0, &(0x7f0000000040)="c8189415543dc2069e51abfd46d08f369220adc943c14600354e8e5d15afa7e7f1cbc360bd617e71d5904567cc2da4cdbf4a08fdc17d9668e30ed185d016e5a37a0660cd9549834012810f498cf5b6f798e2a9bb999c0aba380a41ae5ce741c05d98d31faf720d110e37b80eff8e8804056ccaf46c997e581fdd9512c37d92e5e03065c01d407100ff002adaa31315c707ddc03af6474492de72dff44a43e2e0141ad7847d2dfc2511cfa40fa728c78d", 0xb0, 0x10, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:20 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 64) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 08:24:20 executing program 5: syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x9e, &(0x7f0000000180)={0x0, 0xecc5, 0x24, 0x3, 0x366}, &(0x7f00009a6000/0x3000)=nil, &(0x7f000041f000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f00009d5000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000a48000/0x1000)=nil, 0x1000, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x9e, &(0x7f0000000180)={0x0, 0xecc5, 0x24, 0x3, 0x366}, &(0x7f00009a6000/0x3000)=nil, &(0x7f000041f000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f00009d5000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000a48000/0x1000)=nil, 0x1000, 0x3}, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) [ 2404.539912][T28482] loop1: detected capacity change from 0 to 140 [ 2404.565891][T28482] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:20 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="00d95829000001cb8a007b5c6b9684349c8b25a5c751c45aaff0dfdf50d85822964d2c002f92b36826ef3c2f1f8791bc2bf4cfbd89744ed50c9e7dc36b", @ANYRES32=r0, @ANYBLOB="01000000010000002e2f66696c653000"]) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000180a01040000000000000000050000050900020073797a320000000008000740000000010c00054000000000000000056c000380080002400000010108000140000000000800014000000000080001400000000040000380140001007465616d5f736c6176655f31000000001400010070696d3672656730000000000000000014000100776c616e31000000000000000000000008000240000000010c0005420000000000000001140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x4048980}, 0x4000) r2 = socket(0x2a, 0x0, 0x40000000) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc3}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x400}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x40) 08:24:20 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="00d95829000001cb8a007b5c6b9684349c8b25a5c751c45aaff0dfdf50d85822964d2c002f92b36826ef3c2f1f8791bc2bf4cfbd89744ed50c9e7dc36b", @ANYRES32=r0, @ANYBLOB="01000000010000002e2f66696c653000"]) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000180a01040000000000000000050000050900020073797a320000000008000740000000010c00054000000000000000056c000380080002400000010108000140000000000800014000000000080001400000000040000380140001007465616d5f736c6176655f31000000001400010070696d3672656730000000000000000014000100776c616e31000000000000000000000008000240000000010c0005420000000000000001140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x4048980}, 0x4000) (async) r2 = socket(0x2a, 0x0, 0x40000000) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc3}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x400}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x40) 08:24:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2404.585773][T28482] EXT4-fs (loop1): get root inode failed [ 2404.591512][T28482] EXT4-fs (loop1): mount failed 08:24:20 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5000003, 0x10, r4, 0x10000000) syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0xfffffffc) syz_io_uring_complete(r5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) sendto$phonet(r3, &(0x7f0000000380)="925ae7d0692aeb51585a7e482d720a2fbdbb88459c638ccf7de628e072648b2f644b3daa3e5e4abf0a259bf0051c7c8cbeef9fc21c00f2901bb8ec699258bba7af9be3dac0327daf50e64d7b6a8ba8318a8a425ddf6aaf942aea4c6f605c1f15fc56bc6c", 0x64, 0x0, &(0x7f00000001c0)={0x23, 0x7, 0x7, 0x4}, 0x10) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r10 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x7ff) 08:24:20 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="00d95829000001cb8a007b5c6b9684349c8b25a5c751c45aaff0dfdf50d85822964d2c002f92b36826ef3c2f1f8791bc2bf4cfbd89744ed50c9e7dc36b", @ANYRES32=r0, @ANYBLOB="01000000010000002e2f66696c653000"]) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000180a01040000000000000000050000050900020073797a320000000008000740000000010c00054000000000000000056c000380080002400000010108000140000000000800014000000000080001400000000040000380140001007465616d5f736c6176655f31000000001400010070696d3672656730000000000000000014000100776c616e31000000000000000000000008000240000000010c0005420000000000000001140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x4048980}, 0x4000) r2 = socket(0x2a, 0x0, 0x40000000) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x90, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc3}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x400}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x40) [ 2404.652573][T28532] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2404.669378][T28537] loop1: detected capacity change from 0 to 140 [ 2404.705713][T28537] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2404.737143][T28537] EXT4-fs (loop1): get root inode failed [ 2404.742866][T28537] EXT4-fs (loop1): mount failed 08:24:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'geneve0\x00', 0x1}, 0x18) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) 08:24:21 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5000003, 0x10, r4, 0x10000000) (async) syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0xfffffffc) syz_io_uring_complete(r5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) sendto$phonet(r3, &(0x7f0000000380)="925ae7d0692aeb51585a7e482d720a2fbdbb88459c638ccf7de628e072648b2f644b3daa3e5e4abf0a259bf0051c7c8cbeef9fc21c00f2901bb8ec699258bba7af9be3dac0327daf50e64d7b6a8ba8318a8a425ddf6aaf942aea4c6f605c1f15fc56bc6c", 0x64, 0x0, &(0x7f00000001c0)={0x23, 0x7, 0x7, 0x4}, 0x10) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r10 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x7ff) 08:24:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:21 executing program 4: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x8, 0x3f, 0x8000, 0x8601]}, &(0x7f00000002c0)=0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'ip_vti0\x00', 0x7}) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2405.382564][T28553] loop1: detected capacity change from 0 to 140 [ 2405.413730][T28553] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2405.425760][T28553] EXT4-fs (loop1): get root inode failed 08:24:21 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = dup2(r2, r2) fallocate(r3, 0x62, 0xc7a0, 0x4) sendto$inet6(r0, &(0x7f0000000040)="c8189415543dc2069e51abfd46d08f369220adc943c14600354e8e5d15afa7e7f1cbc360bd617e71d5904567cc2da4cdbf4a08fdc17d9668e30ed185d016e5a37a0660cd9549834012810f498cf5b6f798e2a9bb999c0aba380a41ae5ce741c05d98d31faf720d110e37b80eff8e8804056ccaf46c997e581fdd9512c37d92e5e03065c01d407100ff002adaa31315c707ddc03af6474492de72dff44a43e2e0141ad7847d2dfc2511cfa40fa728c78d", 0xb0, 0x10, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) dup2(r2, r2) (async) fallocate(r3, 0x62, 0xc7a0, 0x4) (async) sendto$inet6(r0, &(0x7f0000000040)="c8189415543dc2069e51abfd46d08f369220adc943c14600354e8e5d15afa7e7f1cbc360bd617e71d5904567cc2da4cdbf4a08fdc17d9668e30ed185d016e5a37a0660cd9549834012810f498cf5b6f798e2a9bb999c0aba380a41ae5ce741c05d98d31faf720d110e37b80eff8e8804056ccaf46c997e581fdd9512c37d92e5e03065c01d407100ff002adaa31315c707ddc03af6474492de72dff44a43e2e0141ad7847d2dfc2511cfa40fa728c78d", 0xb0, 0x10, 0x0, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:21 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x88000cc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000003a7e869c000008000300", @ANYRES32=r4], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x144c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x10bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb0, 0x3, "38d838bf711d456279ae3d27258a8a0819651bd6f716002b90c53bd3cecc55ac80dc8a5e441d1d6252e10aa868dc7190199b41fc8e58a5947257c73eb5125e3e67e86b5afa2dc553b8f7d301e38b5a2b31882fbc3849048ff0bfba2f5f0f4e91758b2df9fe9804955c25ef452f174521f2c3b644fd1fb0faad63c8334b167a680aaaa03d85829569db1864c2bbd9595ee91b99520886e4978483e50e4c7cc4bd1072f03deed518b5fe960976"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_HEAD={0x1c3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0x6, 0x3}}, 0x7fff, @default, 0x8040, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x80}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x4c, "93cf9207638f84f3bb0b8b0324a559a3d9feab0e28a1d1f6d29eb4ece9454a9ac9a7c2a303b74b8e333400215e5ca2a78bad59989b258308a7d9f7f9bc2b8249be7b50943bb3e6d2bd18bfd2"}, {0xdd, 0xdc, "05144fd4f253a81f20682808b43bc9a12a0b77c8e449201393e15f1e591ec3288db7a786f7b15ff59e4ce2354e441ff1fb93cce9bebc7376255521bc7ac396cd7766f2beeed1ad5ad8cd723609d7cb246571a6bd13f0d062194d235b7290d6ece102170e82d61405999a3fc30f6bad9ae35fc147970c4dbc753d7dee4a342cbc378bdcdfa6144b28567ef9509229bc5caf4a6e86577959e49f1c128bc623a72777b5a8be1d7cff6b5b3fb1de6830bf56ce989e25c698e1ac73db446d76d5f023fac92494cdda325cdaa03ce8166269c376052bdfb6b6917e4387ec39"}, {0xdd, 0x2b, "9eef2e3cff89e1b9c9aacc9b1c6c7c588967fb43a42d997fb0dd33d96127b5f57587d8af3a0bc49ac33464"}, {0xdd, 0x3b, "cc0d33e29b7174c33782c064415becbef839e95224b9da911895378dfceb09be97a445bdf793c0eab96c394ffd35fecfa04ca5d6921850cecd09f0"}]}}, @NL80211_ATTR_BEACON_TAIL={0x64, 0xf, [@mesh_chsw={0x76, 0x6, {0x2, 0x7, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x5, [{0xb}, {0x9}, {0xb}, {0x6, 0x1}, {0x4}]}, @mic={0x8c, 0x10, {0xa0d, "be72c9529f64", @short="4f9cae0fd018d0ee"}}, @rann={0x7e, 0x15, {{0x1, 0x46}, 0x3, 0x14, @device_b, 0x3, 0xfffffe00, 0x1000}}, @dsss={0x3, 0x1, 0x6}, @random_vendor={0xdd, 0x20, "51b877ea561280f0cbc9dae7fa27df374187e9e331a86341edb1c7643fb31e55"}]}, @NL80211_ATTR_IE={0x11d, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x103b, @val=0x3e5a, @void, @val="9225b00ce1467f9d6509789303f647d6"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0xe7, "6bc2fd0d681a394bd06b502b5c0f3c75e128f52ebafa23966451e3ad8b82b4dbad53a138a34796b780350157dc7084bec103b02bfbeba9348476bf92fae2af552ffcc9e09a46c686205c1293bf09a16225ba9beebead382f08376768e7e1632c6a96c5c2cfc4f4a3b7290dad4377ac7731029d1fbd1ac0148177d6e4df026571064ba4e88eb32eb923da403eb0415b41889fef58ebe210b01d7cd1032cf29a289cf65ee59be25ea6d91a81f4a80f20a736713ae83c3d4d7b14496d52a1391ce0a4fc6ff7cb0a69646770235d2f1dc14f8df48f653d2afbd3274e034a4b41fbf62e205205ac4b58"}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x41, 0xd}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@cf={0x4, 0x6, {0x6, 0x4, 0x40, 0x7}}, @mesh_chsw={0x76, 0x6, {0x14, 0x5, 0x37, 0x80}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x144c}, 0x1, 0x0, 0x0, 0x20020009}, 0x40008c0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:21 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x6617, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000845000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:21 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5000003, 0x10, r4, 0x10000000) (async) syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @remote}}, 0xfffffffc) syz_io_uring_complete(r5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) sendto$phonet(r3, &(0x7f0000000380)="925ae7d0692aeb51585a7e482d720a2fbdbb88459c638ccf7de628e072648b2f644b3daa3e5e4abf0a259bf0051c7c8cbeef9fc21c00f2901bb8ec699258bba7af9be3dac0327daf50e64d7b6a8ba8318a8a425ddf6aaf942aea4c6f605c1f15fc56bc6c", 0x64, 0x0, &(0x7f00000001c0)={0x23, 0x7, 0x7, 0x4}, 0x10) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r10 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x7ff) 08:24:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'geneve0\x00', 0x1}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'geneve0\x00', 0x1}, 0x18) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) (async) 08:24:21 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000a4b000/0x13000)=nil, 0x13000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x6) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:21 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x6617, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000845000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x6617, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000845000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x2) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2405.431519][T28553] EXT4-fs (loop1): mount failed 08:24:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:21 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x6617, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000845000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x2) (async, rerun: 64) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2405.495279][T28600] loop1: detected capacity change from 0 to 140 [ 2405.511622][T28603] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:21 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async, rerun: 32) r3 = dup2(r2, r2) (rerun: 32) fallocate(r3, 0x62, 0xc7a0, 0x4) (async) sendto$inet6(r0, &(0x7f0000000040)="c8189415543dc2069e51abfd46d08f369220adc943c14600354e8e5d15afa7e7f1cbc360bd617e71d5904567cc2da4cdbf4a08fdc17d9668e30ed185d016e5a37a0660cd9549834012810f498cf5b6f798e2a9bb999c0aba380a41ae5ce741c05d98d31faf720d110e37b80eff8e8804056ccaf46c997e581fdd9512c37d92e5e03065c01d407100ff002adaa31315c707ddc03af6474492de72dff44a43e2e0141ad7847d2dfc2511cfa40fa728c78d", 0xb0, 0x10, 0x0, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:21 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa5757cdbabc9a571}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25010000000c00078008000100", @ANYRES32=r0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8040001) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:21 executing program 2: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:21 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="24f3baed86ec3d08e9cd59bc08985148988d7356ae5902c2fca2524b6d2568d5925ee7dce7ca27582c9ccf9968b9d1e47c2f3de75348700ea7ed292cefc46e5d49d7ca0f2d35b79a9def1d7b186d00ab666225e8df1f7217e1abdcd04e645b45c903be30d6f6b9e2f34ad39f4a2fe50fec0c4a08b0622bc7ec1441e06aa1a243bdd285f017d21a804517887c1104312685", 0x91}, {&(0x7f0000000180)="4382ef13466a0959629c1959a7bf19f7e5bca8d7a581e1761eb4e7712ff82603786526ff8ed73bf9a88c41b8163a633a5648b4b6d826b2bbb7c3e5dd2c5122daf14aaf8dac80588ba06e455a172e42228d338fac1e4abee2d4f850da5000ec8e38ac0e3aac94ff9c3fc31d9e947c9f", 0x6f}], 0x2) sendto$inet6(r2, &(0x7f0000000240)="1b0012ad0016001d0d89fdc5cbddfa564dca1400", 0x14, 0x8080, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x81, @remote, 0x8}, 0x1c) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000300)={0x9, 0x20}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r4, &(0x7f0000000340)="681abc81cd67adb396e0ec6757111425db81d174a1d9cc598543786c7b13ea799bc53b290b580d1254e24da1e2431cafdb9ea99ae5712777242b4f720bbefbb5115578bfca4ce8c47e933ecc94ef4438fbf943516e159091ce5a95746f83149b5680ecd5300bfa95edcaf8eea5a06aab187718c7b5f4ffdeade9844e4f57efd803bf6569", &(0x7f0000000400)=""/121}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2405.534562][T28600] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2405.550284][T28600] EXT4-fs (loop1): get root inode failed [ 2405.555978][T28600] EXT4-fs (loop1): mount failed 08:24:21 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x88000cc, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000003a7e869c000008000300", @ANYRES32=r4], 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x144c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x10bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb0, 0x3, "38d838bf711d456279ae3d27258a8a0819651bd6f716002b90c53bd3cecc55ac80dc8a5e441d1d6252e10aa868dc7190199b41fc8e58a5947257c73eb5125e3e67e86b5afa2dc553b8f7d301e38b5a2b31882fbc3849048ff0bfba2f5f0f4e91758b2df9fe9804955c25ef452f174521f2c3b644fd1fb0faad63c8334b167a680aaaa03d85829569db1864c2bbd9595ee91b99520886e4978483e50e4c7cc4bd1072f03deed518b5fe960976"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_HEAD={0x1c3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0x6, 0x3}}, 0x7fff, @default, 0x8040, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x80}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x4c, "93cf9207638f84f3bb0b8b0324a559a3d9feab0e28a1d1f6d29eb4ece9454a9ac9a7c2a303b74b8e333400215e5ca2a78bad59989b258308a7d9f7f9bc2b8249be7b50943bb3e6d2bd18bfd2"}, {0xdd, 0xdc, "05144fd4f253a81f20682808b43bc9a12a0b77c8e449201393e15f1e591ec3288db7a786f7b15ff59e4ce2354e441ff1fb93cce9bebc7376255521bc7ac396cd7766f2beeed1ad5ad8cd723609d7cb246571a6bd13f0d062194d235b7290d6ece102170e82d61405999a3fc30f6bad9ae35fc147970c4dbc753d7dee4a342cbc378bdcdfa6144b28567ef9509229bc5caf4a6e86577959e49f1c128bc623a72777b5a8be1d7cff6b5b3fb1de6830bf56ce989e25c698e1ac73db446d76d5f023fac92494cdda325cdaa03ce8166269c376052bdfb6b6917e4387ec39"}, {0xdd, 0x2b, "9eef2e3cff89e1b9c9aacc9b1c6c7c588967fb43a42d997fb0dd33d96127b5f57587d8af3a0bc49ac33464"}, {0xdd, 0x3b, "cc0d33e29b7174c33782c064415becbef839e95224b9da911895378dfceb09be97a445bdf793c0eab96c394ffd35fecfa04ca5d6921850cecd09f0"}]}}, @NL80211_ATTR_BEACON_TAIL={0x64, 0xf, [@mesh_chsw={0x76, 0x6, {0x2, 0x7, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x5, [{0xb}, {0x9}, {0xb}, {0x6, 0x1}, {0x4}]}, @mic={0x8c, 0x10, {0xa0d, "be72c9529f64", @short="4f9cae0fd018d0ee"}}, @rann={0x7e, 0x15, {{0x1, 0x46}, 0x3, 0x14, @device_b, 0x3, 0xfffffe00, 0x1000}}, @dsss={0x3, 0x1, 0x6}, @random_vendor={0xdd, 0x20, "51b877ea561280f0cbc9dae7fa27df374187e9e331a86341edb1c7643fb31e55"}]}, @NL80211_ATTR_IE={0x11d, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x103b, @val=0x3e5a, @void, @val="9225b00ce1467f9d6509789303f647d6"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0xe7, "6bc2fd0d681a394bd06b502b5c0f3c75e128f52ebafa23966451e3ad8b82b4dbad53a138a34796b780350157dc7084bec103b02bfbeba9348476bf92fae2af552ffcc9e09a46c686205c1293bf09a16225ba9beebead382f08376768e7e1632c6a96c5c2cfc4f4a3b7290dad4377ac7731029d1fbd1ac0148177d6e4df026571064ba4e88eb32eb923da403eb0415b41889fef58ebe210b01d7cd1032cf29a289cf65ee59be25ea6d91a81f4a80f20a736713ae83c3d4d7b14496d52a1391ce0a4fc6ff7cb0a69646770235d2f1dc14f8df48f653d2afbd3274e034a4b41fbf62e205205ac4b58"}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x41, 0xd}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@cf={0x4, 0x6, {0x6, 0x4, 0x40, 0x7}}, @mesh_chsw={0x76, 0x6, {0x14, 0x5, 0x37, 0x80}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x144c}, 0x1, 0x0, 0x0, 0x20020009}, 0x40008c0) (async, rerun: 64) socket(0x11, 0x2, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r6 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (rerun: 32) io_uring_enter(r6, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:21 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x88000cc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000003a7e869c000008000300", @ANYRES32=r4], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x144c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x10bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb0, 0x3, "38d838bf711d456279ae3d27258a8a0819651bd6f716002b90c53bd3cecc55ac80dc8a5e441d1d6252e10aa868dc7190199b41fc8e58a5947257c73eb5125e3e67e86b5afa2dc553b8f7d301e38b5a2b31882fbc3849048ff0bfba2f5f0f4e91758b2df9fe9804955c25ef452f174521f2c3b644fd1fb0faad63c8334b167a680aaaa03d85829569db1864c2bbd9595ee91b99520886e4978483e50e4c7cc4bd1072f03deed518b5fe960976"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_HEAD={0x1c3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0x6, 0x3}}, 0x7fff, @default, 0x8040, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x80}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x4c, "93cf9207638f84f3bb0b8b0324a559a3d9feab0e28a1d1f6d29eb4ece9454a9ac9a7c2a303b74b8e333400215e5ca2a78bad59989b258308a7d9f7f9bc2b8249be7b50943bb3e6d2bd18bfd2"}, {0xdd, 0xdc, "05144fd4f253a81f20682808b43bc9a12a0b77c8e449201393e15f1e591ec3288db7a786f7b15ff59e4ce2354e441ff1fb93cce9bebc7376255521bc7ac396cd7766f2beeed1ad5ad8cd723609d7cb246571a6bd13f0d062194d235b7290d6ece102170e82d61405999a3fc30f6bad9ae35fc147970c4dbc753d7dee4a342cbc378bdcdfa6144b28567ef9509229bc5caf4a6e86577959e49f1c128bc623a72777b5a8be1d7cff6b5b3fb1de6830bf56ce989e25c698e1ac73db446d76d5f023fac92494cdda325cdaa03ce8166269c376052bdfb6b6917e4387ec39"}, {0xdd, 0x2b, "9eef2e3cff89e1b9c9aacc9b1c6c7c588967fb43a42d997fb0dd33d96127b5f57587d8af3a0bc49ac33464"}, {0xdd, 0x3b, "cc0d33e29b7174c33782c064415becbef839e95224b9da911895378dfceb09be97a445bdf793c0eab96c394ffd35fecfa04ca5d6921850cecd09f0"}]}}, @NL80211_ATTR_BEACON_TAIL={0x64, 0xf, [@mesh_chsw={0x76, 0x6, {0x2, 0x7, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x5, [{0xb}, {0x9}, {0xb}, {0x6, 0x1}, {0x4}]}, @mic={0x8c, 0x10, {0xa0d, "be72c9529f64", @short="4f9cae0fd018d0ee"}}, @rann={0x7e, 0x15, {{0x1, 0x46}, 0x3, 0x14, @device_b, 0x3, 0xfffffe00, 0x1000}}, @dsss={0x3, 0x1, 0x6}, @random_vendor={0xdd, 0x20, "51b877ea561280f0cbc9dae7fa27df374187e9e331a86341edb1c7643fb31e55"}]}, @NL80211_ATTR_IE={0x11d, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x103b, @val=0x3e5a, @void, @val="9225b00ce1467f9d6509789303f647d6"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0xe7, "6bc2fd0d681a394bd06b502b5c0f3c75e128f52ebafa23966451e3ad8b82b4dbad53a138a34796b780350157dc7084bec103b02bfbeba9348476bf92fae2af552ffcc9e09a46c686205c1293bf09a16225ba9beebead382f08376768e7e1632c6a96c5c2cfc4f4a3b7290dad4377ac7731029d1fbd1ac0148177d6e4df026571064ba4e88eb32eb923da403eb0415b41889fef58ebe210b01d7cd1032cf29a289cf65ee59be25ea6d91a81f4a80f20a736713ae83c3d4d7b14496d52a1391ce0a4fc6ff7cb0a69646770235d2f1dc14f8df48f653d2afbd3274e034a4b41fbf62e205205ac4b58"}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x41, 0xd}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@cf={0x4, 0x6, {0x6, 0x4, 0x40, 0x7}}, @mesh_chsw={0x76, 0x6, {0x14, 0x5, 0x37, 0x80}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x144c}, 0x1, 0x0, 0x0, 0x20020009}, 0x40008c0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r6, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x88000cc, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000003a7e869c000008000300", @ANYRES32=r4], 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x144c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4c}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x10bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb0, 0x3, "38d838bf711d456279ae3d27258a8a0819651bd6f716002b90c53bd3cecc55ac80dc8a5e441d1d6252e10aa868dc7190199b41fc8e58a5947257c73eb5125e3e67e86b5afa2dc553b8f7d301e38b5a2b31882fbc3849048ff0bfba2f5f0f4e91758b2df9fe9804955c25ef452f174521f2c3b644fd1fb0faad63c8334b167a680aaaa03d85829569db1864c2bbd9595ee91b99520886e4978483e50e4c7cc4bd1072f03deed518b5fe960976"}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_HEAD={0x1c3, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @from_mac, {0x6, 0x3}}, 0x7fff, @default, 0x8040, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x80}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x4c, "93cf9207638f84f3bb0b8b0324a559a3d9feab0e28a1d1f6d29eb4ece9454a9ac9a7c2a303b74b8e333400215e5ca2a78bad59989b258308a7d9f7f9bc2b8249be7b50943bb3e6d2bd18bfd2"}, {0xdd, 0xdc, "05144fd4f253a81f20682808b43bc9a12a0b77c8e449201393e15f1e591ec3288db7a786f7b15ff59e4ce2354e441ff1fb93cce9bebc7376255521bc7ac396cd7766f2beeed1ad5ad8cd723609d7cb246571a6bd13f0d062194d235b7290d6ece102170e82d61405999a3fc30f6bad9ae35fc147970c4dbc753d7dee4a342cbc378bdcdfa6144b28567ef9509229bc5caf4a6e86577959e49f1c128bc623a72777b5a8be1d7cff6b5b3fb1de6830bf56ce989e25c698e1ac73db446d76d5f023fac92494cdda325cdaa03ce8166269c376052bdfb6b6917e4387ec39"}, {0xdd, 0x2b, "9eef2e3cff89e1b9c9aacc9b1c6c7c588967fb43a42d997fb0dd33d96127b5f57587d8af3a0bc49ac33464"}, {0xdd, 0x3b, "cc0d33e29b7174c33782c064415becbef839e95224b9da911895378dfceb09be97a445bdf793c0eab96c394ffd35fecfa04ca5d6921850cecd09f0"}]}}, @NL80211_ATTR_BEACON_TAIL={0x64, 0xf, [@mesh_chsw={0x76, 0x6, {0x2, 0x7, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x5, [{0xb}, {0x9}, {0xb}, {0x6, 0x1}, {0x4}]}, @mic={0x8c, 0x10, {0xa0d, "be72c9529f64", @short="4f9cae0fd018d0ee"}}, @rann={0x7e, 0x15, {{0x1, 0x46}, 0x3, 0x14, @device_b, 0x3, 0xfffffe00, 0x1000}}, @dsss={0x3, 0x1, 0x6}, @random_vendor={0xdd, 0x20, "51b877ea561280f0cbc9dae7fa27df374187e9e331a86341edb1c7643fb31e55"}]}, @NL80211_ATTR_IE={0x11d, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x103b, @val=0x3e5a, @void, @val="9225b00ce1467f9d6509789303f647d6"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0xe7, "6bc2fd0d681a394bd06b502b5c0f3c75e128f52ebafa23966451e3ad8b82b4dbad53a138a34796b780350157dc7084bec103b02bfbeba9348476bf92fae2af552ffcc9e09a46c686205c1293bf09a16225ba9beebead382f08376768e7e1632c6a96c5c2cfc4f4a3b7290dad4377ac7731029d1fbd1ac0148177d6e4df026571064ba4e88eb32eb923da403eb0415b41889fef58ebe210b01d7cd1032cf29a289cf65ee59be25ea6d91a81f4a80f20a736713ae83c3d4d7b14496d52a1391ce0a4fc6ff7cb0a69646770235d2f1dc14f8df48f653d2afbd3274e034a4b41fbf62e205205ac4b58"}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x41, 0xd}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@cf={0x4, 0x6, {0x6, 0x4, 0x40, 0x7}}, @mesh_chsw={0x76, 0x6, {0x14, 0x5, 0x37, 0x80}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x144c}, 0x1, 0x0, 0x0, 0x20020009}, 0x40008c0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r6, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:21 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000a4b000/0x13000)=nil, 0x13000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x6) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:22 executing program 2: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2405.830233][T28652] loop1: detected capacity change from 0 to 140 [ 2405.890239][T28652] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:22 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000a4b000/0x13000)=nil, 0x13000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x6) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000a4b000/0x13000)=nil, 0x13000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x6) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:22 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa5757cdbabc9a571}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25010000000c00078008000100", @ANYRES32=r0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8040001) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa5757cdbabc9a571}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25010000000c00078008000100", @ANYRES32=r0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8040001) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2405.987682][T28652] EXT4-fs (loop1): get root inode failed [ 2405.993399][T28652] EXT4-fs (loop1): mount failed 08:24:22 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:22 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x2, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) bind(r0, &(0x7f0000000180)=@ethernet={0x6, @multicast}, 0x80) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket(0x9, 0x80000, 0x9) r1 = syz_io_uring_setup(0x4292, &(0x7f00000002c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6, 0x2, 0x200, 0x4cadfbd, 0x2}) io_uring_enter(r0, 0x3bbb, 0xb9b4, 0x1, &(0x7f00000000c0)={[0x7]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24}, 0x38) dup(0xffffffffffffffff) 08:24:22 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async, rerun: 64) socket(0x11, 0x2, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 08:24:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2406.138774][T28696] loop1: detected capacity change from 0 to 140 [ 2406.181231][T28696] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2406.222805][T28696] EXT4-fs (loop1): get root inode failed [ 2406.228605][T28696] EXT4-fs (loop1): mount failed 08:24:22 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="24f3baed86ec3d08e9cd59bc08985148988d7356ae5902c2fca2524b6d2568d5925ee7dce7ca27582c9ccf9968b9d1e47c2f3de75348700ea7ed292cefc46e5d49d7ca0f2d35b79a9def1d7b186d00ab666225e8df1f7217e1abdcd04e645b45c903be30d6f6b9e2f34ad39f4a2fe50fec0c4a08b0622bc7ec1441e06aa1a243bdd285f017d21a804517887c1104312685", 0x91}, {&(0x7f0000000180)="4382ef13466a0959629c1959a7bf19f7e5bca8d7a581e1761eb4e7712ff82603786526ff8ed73bf9a88c41b8163a633a5648b4b6d826b2bbb7c3e5dd2c5122daf14aaf8dac80588ba06e455a172e42228d338fac1e4abee2d4f850da5000ec8e38ac0e3aac94ff9c3fc31d9e947c9f", 0x6f}], 0x2) (async) sendto$inet6(r2, &(0x7f0000000240)="1b0012ad0016001d0d89fdc5cbddfa564dca1400", 0x14, 0x8080, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x81, @remote, 0x8}, 0x1c) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000300)={0x9, 0x20}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r4, &(0x7f0000000340)="681abc81cd67adb396e0ec6757111425db81d174a1d9cc598543786c7b13ea799bc53b290b580d1254e24da1e2431cafdb9ea99ae5712777242b4f720bbefbb5115578bfca4ce8c47e933ecc94ef4438fbf943516e159091ce5a95746f83149b5680ecd5300bfa95edcaf8eea5a06aab187718c7b5f4ffdeade9844e4f57efd803bf6569", &(0x7f0000000400)=""/121}, 0x20) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:22 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:22 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa5757cdbabc9a571}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25010000000c00078008000100", @ANYRES32=r0, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8040001) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x4000000017e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:22 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000eb2000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x307c, 0x0, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x2df, 0x4, 0x1, {0x0, 0x0, r3}}, 0x7) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46200}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x36c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x1, 0x1, {0x0, r7}}, 0x400) r8 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r11 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r12}, 0x38) syz_io_uring_submit(r4, r10, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x42, {0x0, r12}, 0x0, 0x5, 0x0, {0x0, 0x0, r3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21a4, &(0x7f00000002c0)={0x0, 0xb00f, 0x20, 0x1, 0xa6, 0x0, r8}, &(0x7f00004c2000/0x2000)=nil, &(0x7f0000a82000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)) 08:24:22 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x294941, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5a26}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000000)=0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) 08:24:22 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x65c) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:22 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="24f3baed86ec3d08e9cd59bc08985148988d7356ae5902c2fca2524b6d2568d5925ee7dce7ca27582c9ccf9968b9d1e47c2f3de75348700ea7ed292cefc46e5d49d7ca0f2d35b79a9def1d7b186d00ab666225e8df1f7217e1abdcd04e645b45c903be30d6f6b9e2f34ad39f4a2fe50fec0c4a08b0622bc7ec1441e06aa1a243bdd285f017d21a804517887c1104312685", 0x91}, {&(0x7f0000000180)="4382ef13466a0959629c1959a7bf19f7e5bca8d7a581e1761eb4e7712ff82603786526ff8ed73bf9a88c41b8163a633a5648b4b6d826b2bbb7c3e5dd2c5122daf14aaf8dac80588ba06e455a172e42228d338fac1e4abee2d4f850da5000ec8e38ac0e3aac94ff9c3fc31d9e947c9f", 0x6f}], 0x2) sendto$inet6(r2, &(0x7f0000000240)="1b0012ad0016001d0d89fdc5cbddfa564dca1400", 0x14, 0x8080, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x81, @remote, 0x8}, 0x1c) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000300)={0x9, 0x20}) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r4, &(0x7f0000000340)="681abc81cd67adb396e0ec6757111425db81d174a1d9cc598543786c7b13ea799bc53b290b580d1254e24da1e2431cafdb9ea99ae5712777242b4f720bbefbb5115578bfca4ce8c47e933ecc94ef4438fbf943516e159091ce5a95746f83149b5680ecd5300bfa95edcaf8eea5a06aab187718c7b5f4ffdeade9844e4f57efd803bf6569", &(0x7f0000000400)=""/121}, 0x20) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2406.486275][T28706] loop1: detected capacity change from 0 to 19 [ 2406.515809][T28706] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (9 blocks) 08:24:22 executing program 0: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/12, 0xc, 0x40000182, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) splice(r2, 0x0, r1, 0x0, 0x408000, 0x0) 08:24:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2406.554123][T28728] loop2: detected capacity change from 0 to 264192 [ 2406.581529][T28731] loop1: detected capacity change from 0 to 19 [ 2406.602333][T28728] EXT4-fs error (device loop2): __ext4_fill_super:5234: inode #2: comm syz-executor.2: iget: checksum invalid [ 2406.621816][T28728] EXT4-fs (loop2): get root inode failed [ 2406.627557][T28728] EXT4-fs (loop2): mount failed [ 2406.636037][T28731] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (9 blocks) 08:24:22 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000eb2000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x307c, 0x0, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x2df, 0x4, 0x1, {0x0, 0x0, r3}}, 0x7) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46200}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x36c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x1, 0x1, {0x0, r7}}, 0x400) (async, rerun: 64) r8 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r11 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r12}, 0x38) (async) syz_io_uring_submit(r4, r10, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x42, {0x0, r12}, 0x0, 0x5, 0x0, {0x0, 0x0, r3}}, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x21a4, &(0x7f00000002c0)={0x0, 0xb00f, 0x20, 0x1, 0xa6, 0x0, r8}, &(0x7f00004c2000/0x2000)=nil, &(0x7f0000a82000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)) (rerun: 64) 08:24:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:22 executing program 2: r0 = syz_io_uring_setup(0x8004292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3a9}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd_index=0x4, 0x6, 0xfffffffffffffe0c, 0x6, 0x10, 0x1, {0x3}}, 0x400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000180)="19863d997935fd695057e39f3a6d4638f78fba6bbc84ad023ea7239a0b4b6daf725a7cd1c64b2afa3e2e1777eb084c8d66417559acbbf5604c469bfcd3921d40fd40dd18480dc10f918839dc15", &(0x7f0000000240)=""/103}, 0x20) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, 0x0, 0x88000cc, 0x0) sendto$inet(r1, &(0x7f0000000100)="87f8e8f24b0c111e8378a6c580bad7d8b4af513dbd2138f213090141488c87ae22d8e2b68e772cd34a7315e61aa13de1b6f82e5e94214822281a55f5", 0x3c, 0x804, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) 08:24:22 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000eb2000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x307c, 0x0, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x2df, 0x4, 0x1, {0x0, 0x0, r3}}, 0x7) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46200}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x36c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x1, 0x1, {0x0, r7}}, 0x400) r8 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r11 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r12}, 0x38) syz_io_uring_submit(r4, r10, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x42, {0x0, r12}, 0x0, 0x5, 0x0, {0x0, 0x0, r3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21a4, &(0x7f00000002c0)={0x0, 0xb00f, 0x20, 0x1, 0xa6, 0x0, r8}, &(0x7f00004c2000/0x2000)=nil, &(0x7f0000a82000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000eb2000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000001c0)=0x307c, 0x0, 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x2df, 0x4, 0x1, {0x0, 0x0, r3}}, 0x7) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x46200}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x36c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x1, 0x1, 0x1, {0x0, r7}}, 0x400) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r12}, 0x38) (async) syz_io_uring_submit(r4, r10, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x42, {0x0, r12}, 0x0, 0x5, 0x0, {0x0, 0x0, r3}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x21a4, &(0x7f00000002c0)={0x0, 0xb00f, 0x20, 0x1, 0xa6, 0x0, r8}, &(0x7f00004c2000/0x2000)=nil, &(0x7f0000a82000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000380)) (async) [ 2406.750848][T28745] loop1: detected capacity change from 0 to 19 [ 2406.780978][T28745] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (9 blocks) 08:24:22 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x294941, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5a26}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000000)=0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x294941, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5a26}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000000)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) 08:24:23 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x12, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x82, 0x400000, 0x23456, {0x0, r4}}, 0x1ff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:23 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) poll(0x0, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x65c) (async, rerun: 64) socket(0x11, 0x2, 0x0) (rerun: 64) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2406.933394][T28775] loop1: detected capacity change from 0 to 140 [ 2406.966676][T28775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 08:24:23 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x65c) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2407.007898][T28775] ext4 filesystem being mounted at /root/syzkaller-testdir3637728185/syzkaller.hQdzu3/3531/mnt supports timestamps until 2038 (0x7fffffff) [ 2407.072102][ T1833] EXT4-fs (loop1): unmounting filesystem. 08:24:23 executing program 0: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/12, 0xc, 0x40000182, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) (async) splice(r2, 0x0, r1, 0x0, 0x408000, 0x0) 08:24:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:23 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x12, r0, 0x8000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x82, 0x400000, 0x23456, {0x0, r4}}, 0x1ff) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:23 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x294941, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5a26}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000000)=0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) 08:24:23 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@deltclass={0xb0, 0x29, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0x55a639c6ad9804f2}, {0x4, 0x1}, {0x7, 0x2}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x0, 0x0, 0x2, 0x4cd, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x4}, 0x1f, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff2}, 0x344, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x10001, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x46, 0x80}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008804) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf83bb9f1"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)={0x5, 0x240, 0x4, {0x0, 0xea60}, {}, {0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3e, 0x3, 0x0, 0x0, "62d7edd337c4f807f8696e068b6e09b46d0db74fe78e053e032feb20cd7d6dcb618b4487f4f7ddd4494de7d1ed7371f8b2b34fedbda0e479057d12537285a9e8"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2804c005) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r4 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2407.440627][T28801] loop1: detected capacity change from 0 to 140 [ 2407.465043][T28801] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2407.503687][T28801] EXT4-fs (loop1): get root inode failed [ 2407.509422][T28801] EXT4-fs (loop1): mount failed 08:24:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, 0x0, 0x88000cc, 0x0) sendto$inet(r1, &(0x7f0000000100)="87f8e8f24b0c111e8378a6c580bad7d8b4af513dbd2138f213090141488c87ae22d8e2b68e772cd34a7315e61aa13de1b6f82e5e94214822281a55f5", 0x3c, 0x804, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) 08:24:23 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x12, r0, 0x8000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x82, 0x400000, 0x23456, {0x0, r4}}, 0x1ff) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:23 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffff81, 0x88000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x15e77d0727ef91d4}, 0x0, 0xd4ae, 0xa932, 0x0, 0x4, 0x10001, 0x401, 0x0, 0x4b, 0x0, 0x7}, 0x0, 0x0, r3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:23 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:23 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@deltclass={0xb0, 0x29, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0x55a639c6ad9804f2}, {0x4, 0x1}, {0x7, 0x2}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x0, 0x0, 0x2, 0x4cd, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x4}, 0x1f, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff2}, 0x344, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x10001, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x46, 0x80}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008804) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf83bb9f1"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)={0x5, 0x240, 0x4, {0x0, 0xea60}, {}, {0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3e, 0x3, 0x0, 0x0, "62d7edd337c4f807f8696e068b6e09b46d0db74fe78e053e032feb20cd7d6dcb618b4487f4f7ddd4494de7d1ed7371f8b2b34fedbda0e479057d12537285a9e8"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2804c005) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r4 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@deltclass={0xb0, 0x29, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0x55a639c6ad9804f2}, {0x4, 0x1}, {0x7, 0x2}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x0, 0x0, 0x2, 0x4cd, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x4}, 0x1f, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff2}, 0x344, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x10001, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x46, 0x80}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008804) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf83bb9f1"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)={0x5, 0x240, 0x4, {0x0, 0xea60}, {}, {0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3e, 0x3, 0x0, 0x0, "62d7edd337c4f807f8696e068b6e09b46d0db74fe78e053e032feb20cd7d6dcb618b4487f4f7ddd4494de7d1ed7371f8b2b34fedbda0e479057d12537285a9e8"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2804c005) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2407.646924][T28819] loop1: detected capacity change from 0 to 140 08:24:23 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0) (async, rerun: 64) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 64) [ 2407.690618][T28819] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2407.731341][T28819] EXT4-fs (loop1): get root inode failed [ 2407.737040][T28819] EXT4-fs (loop1): mount failed 08:24:24 executing program 0: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/12, 0xc, 0x40000182, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) splice(r2, 0x0, r1, 0x0, 0x408000, 0x0) 08:24:24 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:24 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async) r0 = socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@deltclass={0xb0, 0x29, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0x55a639c6ad9804f2}, {0x4, 0x1}, {0x7, 0x2}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_cbq={{0x8}, {0x44, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x0, 0x0, 0x2, 0x4cd, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0x4}, 0x1f, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff2}, 0x344, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff1}, 0x10001, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x46, 0x80}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008804) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf83bb9f1"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)={0x5, 0x240, 0x4, {0x0, 0xea60}, {}, {0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3e, 0x3, 0x0, 0x0, "62d7edd337c4f807f8696e068b6e09b46d0db74fe78e053e032feb20cd7d6dcb618b4487f4f7ddd4494de7d1ed7371f8b2b34fedbda0e479057d12537285a9e8"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2804c005) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r4 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:24 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffff81, 0x88000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x15e77d0727ef91d4}, 0x0, 0xd4ae, 0xa932, 0x0, 0x4, 0x10001, 0x401, 0x0, 0x4b, 0x0, 0x7}, 0x0, 0x0, r3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffff81, 0x88000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x15e77d0727ef91d4}, 0x0, 0xd4ae, 0xa932, 0x0, 0x4, 0x10001, 0x401, 0x0, 0x4b, 0x0, 0x7}, 0x0, 0x0, r3, 0x9) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2408.296701][T28844] loop1: detected capacity change from 0 to 140 [ 2408.322792][T28844] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2408.342889][T28844] EXT4-fs (loop1): get root inode failed [ 2408.348590][T28844] EXT4-fs (loop1): mount failed 08:24:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a9541fa39cd952126e33791efcae550b1a7511f209bfa8d59020ea27a5bebdb5797bbf746bec66", 0x4d, 0x4004091, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x0, 0x654}, 0x100) 08:24:24 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x85, 0x123e}}, './file0\x00'}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x8000, 0x0, 0xa75f, 0x7}, 0x10) 08:24:24 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}, 0x3) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x4e0) 08:24:24 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba00000160000ca141a780f0f8e00"/27, 0x1b, 0x20000880, 0x0, 0xe) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:24 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffff81, 0x88000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x15e77d0727ef91d4}, 0x0, 0xd4ae, 0xa932, 0x0, 0x4, 0x10001, 0x401, 0x0, 0x4b, 0x0, 0x7}, 0x0, 0x0, r3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffff81, 0x88000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0x15e77d0727ef91d4}, 0x0, 0xd4ae, 0xa932, 0x0, 0x4, 0x10001, 0x401, 0x0, 0x4b, 0x0, 0x7}, 0x0, 0x0, r3, 0x9) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x4000000017e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2408.555401][T28880] loop1: detected capacity change from 0 to 140 [ 2408.588077][T28884] loop2: detected capacity change from 0 to 264192 [ 2408.597157][T28880] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2408.620155][T28880] EXT4-fs (loop1): get root inode failed [ 2408.625833][T28880] EXT4-fs (loop1): mount failed [ 2408.640160][T28884] EXT4-fs error (device loop2): __ext4_fill_super:5234: inode #2: comm syz-executor.2: iget: checksum invalid 08:24:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2408.690442][T28884] EXT4-fs (loop2): get root inode failed [ 2408.696149][T28884] EXT4-fs (loop2): mount failed 08:24:24 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}, 0x3) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x4e0) (rerun: 64) 08:24:24 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2408.767347][T28898] loop1: detected capacity change from 0 to 140 08:24:24 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x85, 0x123e}}, './file0\x00'}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x8000, 0x0, 0xa75f, 0x7}, 0x10) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x85, 0x123e}}, './file0\x00'}) (async) fcntl$setstatus(r3, 0x4, 0x2800) (async) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x8000, 0x0, 0xa75f, 0x7}, 0x10) (async) 08:24:24 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}, 0x3) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x4e0) [ 2408.836790][T28898] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated 08:24:25 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2408.881532][T28898] EXT4-fs (loop1): get root inode failed [ 2408.887237][T28898] EXT4-fs (loop1): mount failed 08:24:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:25 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r4, 0xfffffffffffffff8) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x3c, 0x2, 0xe, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x800, 0x929e}, 0x50000, 0xff, 0x6, 0x3, 0x2, 0x8, 0x58c2, 0x0, 0x10001, 0x0, 0x40}, 0xffffffffffffffff, 0x6, r3, 0x1) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2408.997235][T28931] loop1: detected capacity change from 0 to 140 [ 2409.016988][T28931] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2409.055521][T28931] EXT4-fs (loop1): get root inode failed [ 2409.061235][T28931] EXT4-fs (loop1): mount failed 08:24:25 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba00000160000ca141a780f0f8e00"/27, 0x1b, 0x20000880, 0x0, 0xe) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000", 0x4f, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:25 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x85, 0x123e}}, './file0\x00'}) (async, rerun: 64) fcntl$setstatus(r3, 0x4, 0x2800) (rerun: 64) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x8000, 0x0, 0xa75f, 0x7}, 0x10) 08:24:25 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r4, 0xfffffffffffffff8) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x3c, 0x2, 0xe, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x800, 0x929e}, 0x50000, 0xff, 0x6, 0x3, 0x2, 0x8, 0x58c2, 0x0, 0x10001, 0x0, 0x40}, 0xffffffffffffffff, 0x6, r3, 0x1) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) (async) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r4, 0xfffffffffffffff8) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x3c, 0x2, 0xe, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x800, 0x929e}, 0x50000, 0xff, 0x6, 0x3, 0x2, 0x8, 0x58c2, 0x0, 0x10001, 0x0, 0x40}, 0xffffffffffffffff, 0x6, r3, 0x1) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:25 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:25 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:25 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 2409.389246][T28937] loop1: detected capacity change from 0 to 140 08:24:25 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x1, 0xb, "e8bd386de6233b32"}) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2409.476059][T28937] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2409.507923][T28937] EXT4-fs (loop1): get root inode failed [ 2409.513714][T28937] EXT4-fs (loop1): mount failed 08:24:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000", 0x4f, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2409.632228][T28979] loop1: detected capacity change from 0 to 140 [ 2409.676023][T28979] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:25 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xff, 0x3c, 0x8, 0x1, 0x0, 0x4, 0x20008, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21c, 0x1, @perf_config_ext={0xfff, 0x100000001}, 0x124, 0xfffffffffffff001, 0x7, 0x4, 0x200000000, 0x6, 0x2df3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r3, 0x8) [ 2409.724168][T28979] EXT4-fs (loop1): get root inode failed [ 2409.729879][T28979] EXT4-fs (loop1): mount failed 08:24:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000", 0x4f, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2409.812142][T28984] loop1: detected capacity change from 0 to 140 [ 2409.845780][T28984] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:26 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r4, 0xfffffffffffffff8) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x3c, 0x2, 0xe, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x800, 0x929e}, 0x50000, 0xff, 0x6, 0x3, 0x2, 0x8, 0x58c2, 0x0, 0x10001, 0x0, 0x40}, 0xffffffffffffffff, 0x6, r3, 0x1) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) (async) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r4, 0xfffffffffffffff8) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x3c, 0x2, 0xe, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x800, 0x929e}, 0x50000, 0xff, 0x6, 0x3, 0x2, 0x8, 0x58c2, 0x0, 0x10001, 0x0, 0x40}, 0xffffffffffffffff, 0x6, r3, 0x1) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2409.936431][T28984] EXT4-fs (loop1): get root inode failed [ 2409.942144][T28984] EXT4-fs (loop1): mount failed 08:24:26 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba00000160000ca141a780f0f8e00"/27, 0x1b, 0x20000880, 0x0, 0xe) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000140)="1ba00000160000ca141a780f0f8e00"/27, 0x1b, 0x20000880, 0x0, 0xe) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:26 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) (async) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xff, 0x3c, 0x8, 0x1, 0x0, 0x4, 0x20008, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21c, 0x1, @perf_config_ext={0xfff, 0x100000001}, 0x124, 0xfffffffffffff001, 0x7, 0x4, 0x200000000, 0x6, 0x2df3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r3, 0x8) 08:24:26 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 08:24:26 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x1, 0xb, "e8bd386de6233b32"}) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:26 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:26 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x1, 0xb, "e8bd386de6233b32"}) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2410.260547][T29001] loop1: detected capacity change from 0 to 140 08:24:26 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xcef197a5d752b959}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088}, 0x4840) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000180)=@ethernet={0x6, @random="90cc368d4465"}, 0x80) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:26 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x8, 0x0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x18}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2410.305631][T29001] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2410.332385][T29001] EXT4-fs (loop1): get root inode failed [ 2410.338111][T29001] EXT4-fs (loop1): mount failed 08:24:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2410.419308][T29027] loop1: detected capacity change from 0 to 140 [ 2410.440947][T29028] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2410.460306][T29027] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:26 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) (async) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xff, 0x3c, 0x8, 0x1, 0x0, 0x4, 0x20008, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x21c, 0x1, @perf_config_ext={0xfff, 0x100000001}, 0x124, 0xfffffffffffff001, 0x7, 0x4, 0x200000000, 0x6, 0x2df3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r3, 0x8) [ 2410.492700][T29027] EXT4-fs (loop1): get root inode failed [ 2410.498416][T29027] EXT4-fs (loop1): mount failed 08:24:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6e60f9bc", @ANYRES16=r0, @ANYBLOB="000228bd7000fddbdf25090000000c0099000700000012000000080037000000000008000a005a66e90e0900070085cc4e7de500000004000b000a00060008021100000000000800090001ac0f0004000b0004000b00"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2410.586605][T29037] loop1: detected capacity change from 0 to 140 08:24:26 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2410.660257][T29037] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2410.686853][T29037] EXT4-fs (loop1): get root inode failed [ 2410.692641][T29037] EXT4-fs (loop1): mount failed 08:24:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/139, 0x8b, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2410.746915][T29046] loop1: detected capacity change from 0 to 140 [ 2410.774982][T29046] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2410.802497][T29046] EXT4-fs (loop1): get root inode failed [ 2410.808218][T29046] EXT4-fs (loop1): mount failed 08:24:27 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 08:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/139, 0x8b, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) (async) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xcef197a5d752b959}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088}, 0x4840) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000180)=@ethernet={0x6, @random="90cc368d4465"}, 0x80) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:27 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6e60f9bc", @ANYRES16=r0, @ANYBLOB="000228bd7000fddbdf25090000000c0099000700000012000000080037000000000008000a005a66e90e0900070085cc4e7de500000004000b000a00060008021100000000000800090001ac0f0004000b0004000b00"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:27 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2411.070341][T29056] loop1: detected capacity change from 0 to 140 [ 2411.095671][T29056] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2411.117898][T29056] EXT4-fs (loop1): get root inode failed [ 2411.123575][T29056] EXT4-fs (loop1): mount failed 08:24:27 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x8, 0x0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x18}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x8, 0x0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x18}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) (async) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xcef197a5d752b959}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1410, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088}, 0x4840) (async) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000180)=@ethernet={0x6, @random="90cc368d4465"}, 0x80) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:27 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6e60f9bc", @ANYRES16=r0, @ANYBLOB="000228bd7000fddbdf25090000000c0099000700000012000000080037000000000008000a005a66e90e0900070085cc4e7de500000004000b000a00060008021100000000000800090001ac0f0004000b0004000b00"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async, rerun: 64) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/139, 0x8b, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc8b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000080)='pimreg0\x00') [ 2411.248192][T29081] loop1: detected capacity change from 0 to 140 08:24:27 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x3, &(0x7f00000003c0)="93b35e93d954b1905c7de9b2edd2177e022d355a2d7a619c97c8f2b58b42460702da19acc7a3c657570dec94c190f6cec9a8a557f08706e4674e1b6079b27dc56d8c54858044e8bd1c9398bd1242149be8239832490bc1be2d42", 0x2, 0x0, 0x0, {0x2, r4}}, 0x12) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x4000010, r0, 0x8000000) r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x1, 0x1, 0x1, {0x0, r9}}, 0x1ff) [ 2411.290004][T29081] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2411.316042][T29081] EXT4-fs (loop1): get root inode failed [ 2411.321818][T29081] EXT4-fs (loop1): mount failed 08:24:27 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) r3 = syz_clone3(&(0x7f0000000340)={0x80000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x1c}, &(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000000280)=""/101, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x1, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10, 0x0, 0xffffffff, 0x2, 0x0, 0x400000}, r3, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2411.335653][T29094] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:27 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 08:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:27 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x8, 0x0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x18}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x8, 0x0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x18}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:27 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}, 0x1) (async, rerun: 32) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x3, &(0x7f00000003c0)="93b35e93d954b1905c7de9b2edd2177e022d355a2d7a619c97c8f2b58b42460702da19acc7a3c657570dec94c190f6cec9a8a557f08706e4674e1b6079b27dc56d8c54858044e8bd1c9398bd1242149be8239832490bc1be2d42", 0x2, 0x0, 0x0, {0x2, r4}}, 0x12) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x4000010, r0, 0x8000000) (async) r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x1, 0x1, 0x1, {0x0, r9}}, 0x1ff) 08:24:27 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) (async, rerun: 64) r3 = syz_clone3(&(0x7f0000000340)={0x80000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x1c}, &(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000000280)=""/101, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x1, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10, 0x0, 0xffffffff, 0x2, 0x0, 0x400000}, r3, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 32) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc8b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000080)='pimreg0\x00') (rerun: 64) 08:24:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc8b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000080)='pimreg0\x00') 08:24:27 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x3, &(0x7f00000003c0)="93b35e93d954b1905c7de9b2edd2177e022d355a2d7a619c97c8f2b58b42460702da19acc7a3c657570dec94c190f6cec9a8a557f08706e4674e1b6079b27dc56d8c54858044e8bd1c9398bd1242149be8239832490bc1be2d42", 0x2, 0x0, 0x0, {0x2, r4}}, 0x12) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x4000010, r0, 0x8000000) r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x1, 0x1, 0x1, {0x0, r9}}, 0x1ff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x3, &(0x7f00000003c0)="93b35e93d954b1905c7de9b2edd2177e022d355a2d7a619c97c8f2b58b42460702da19acc7a3c657570dec94c190f6cec9a8a557f08706e4674e1b6079b27dc56d8c54858044e8bd1c9398bd1242149be8239832490bc1be2d42", 0x2, 0x0, 0x0, {0x2, r4}}, 0x12) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x4000010, r0, 0x8000000) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x1, 0x1, 0x1, {0x0, r9}}, 0x1ff) (async) [ 2411.706483][T29124] loop1: detected capacity change from 0 to 140 [ 2411.739892][T29124] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2411.758035][T29124] EXT4-fs (loop1): get root inode failed [ 2411.763764][T29124] EXT4-fs (loop1): mount failed [ 2411.768945][T29138] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:27 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) splice(r3, &(0x7f00000000c0)=0xa90c, r1, &(0x7f0000000180), 0x5, 0x2) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2411.867478][T29170] loop1: detected capacity change from 0 to 140 [ 2411.895804][T29170] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2411.919146][T29170] EXT4-fs (loop1): get root inode failed [ 2411.924842][T29170] EXT4-fs (loop1): mount failed [ 2411.930173][T29172] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:28 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000040), 0x0, 0x4) (async) r3 = syz_clone3(&(0x7f0000000340)={0x80000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x1c}, &(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000000280)=""/101, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x1, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x10, 0x0, 0xffffffff, 0x2, 0x0, 0x400000}, r3, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:28 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:28 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 08:24:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:28 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:28 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x34, 0x0, 0x1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x9, 0x1, &(0x7f0000000540)=[{&(0x7f0000000780)="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", 0x1000, 0x3}], 0x46414, &(0x7f0000001780)=ANY=[@ANYBLOB="626cd41b3a0630783030303030304c3030303030313030302c6e6f6a6f6c6965742c6e6f726f636b2c6e6f6a6f6c6965742c6d61703d61636f726e2c6d61703d6f66662c736d61636b6673726f6f743d2f6465762f7a65726f002c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',audit,smackfsdef=,seclabel,context=user_u,uid>', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000002,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r4, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x4}, 0x6) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)="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", &(0x7f00000002c0), 0x24, r8}, 0x38) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000400)={0x20000010}) r9 = gettid() r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x4003, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001940)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000018c0)=@rc={0x1f, @any, 0x3}}, 0x10001) connect$inet(r10, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) tkill(r9, 0x7) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x8, 0x6, 0x8, 0x0, 0x81, 0xa22c1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x8, 0x6, 0x6, 0x3, 0x9, 0x100, 0x86c8, 0x0, 0x1000, 0x0, 0x400}, r9, 0xb, r3, 0x0) [ 2412.444842][T29181] loop1: detected capacity change from 0 to 140 08:24:28 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 32) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 64) [ 2412.506785][T29187] loop5: detected capacity change from 0 to 8 08:24:28 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x34, 0x0, 0x1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x9, 0x1, &(0x7f0000000540)=[{&(0x7f0000000780)="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", 0x1000, 0x3}], 0x46414, &(0x7f0000001780)=ANY=[@ANYBLOB="626cd41b3a0630783030303030304c3030303030313030302c6e6f6a6f6c6965742c6e6f726f636b2c6e6f6a6f6c6965742c6d61703d61636f726e2c6d61703d6f66662c736d61636b6673726f6f743d2f6465762f7a65726f002c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',audit,smackfsdef=,seclabel,context=user_u,uid>', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000002,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r4, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x4}, 0x6) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)="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", &(0x7f00000002c0), 0x24, r8}, 0x38) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000400)={0x20000010}) r9 = gettid() (async) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x4003, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001940)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000018c0)=@rc={0x1f, @any, 0x3}}, 0x10001) connect$inet(r10, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) tkill(r9, 0x7) (async) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x8, 0x6, 0x8, 0x0, 0x81, 0xa22c1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x8, 0x6, 0x6, 0x3, 0x9, 0x100, 0x86c8, 0x0, 0x1000, 0x0, 0x400}, r9, 0xb, r3, 0x0) [ 2412.550223][T29181] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2412.626946][T29181] EXT4-fs (loop1): get root inode failed [ 2412.632651][T29181] EXT4-fs (loop1): mount failed [ 2412.645919][T29195] loop5: detected capacity change from 0 to 8 08:24:28 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) r3 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) splice(r3, &(0x7f00000000c0)=0xa90c, r1, &(0x7f0000000180), 0x5, 0x2) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:28 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 08:24:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/154, 0x9a, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:28 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x34, 0x0, 0x1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x9, 0x1, &(0x7f0000000540)=[{&(0x7f0000000780)="63caa680d3700d39fe4b7cbc8653faefaf9f73d4a0aca634dc2ed9bc770cdd5b853e6686db3a306cedd5472ab4628a189ffc637b9da11d62233c878be7e6061b256678d64027414fb81432ee25154fcf95f0f549e0425778d1283b08c9403b6c918951ec7c2a0d0c428c871e5bce2995278890420638e9604b0034ee5c6b2cc77caaea559d355a97a8fd63ede137a60a1c550ca0773328173766d9c57aa810d9758bac44fada7d1905838162f4ebf1816a5f2cbf6d9c74e6f89cf6288daef04c48357666c2dd06bffb2088691364fef36a7eeb058c81e674a3a165acf031bc777f4612b4b9df5264c10b70bf598cd8b9598bae1c1d6f0338b9a9be64e3d4223b69e5e07303a98351e695e50af622e8fd0ad3f1aa2a37b3a75f8f2b4e2b1563a84ec6a7bb8271ef90bc20bf0bac25415a33b811cda9efc171070aeb44ae3bc2e1bbb1a252f7889e243c7b6199325c5bd68c7885ba836d4f0448a7564e457994694703599262fdc206570650068ed8c5b02302511c0b19fa6b43c16623ad413588ca032dd5b6eb9bf00ce20172955d247028f46f4dc108f227c017f4357c4322b514519939a496469830453c98fd6dea34f133bbac4cc5a70784d1409dd23903e23b9af0b29897c1271c07e53eb12cc262204ba7a8cc22b374e5b133a3c0608c8b5a71f5501ae31097b63a70810f5f854ad99ca7abd7e9b23a10734d02f812cb46be19c5fe00e54e2d60c1081d44e79a591841a6f3f02ea28895b8fbc98e2f4fe893e6e2d9bcdbca808fc5892be9d0da81aba1dc7922e239cf240b29fa8d8560d8fa482d71577b5a33e1d203e98dea1428da469a02f9512770ea735c84911144bea033f9592b90a74d50c563dda23f694308bbd7f93f08329f3530c2c7136b344aee89882c563c85e8408bec1a853859d5852e7ecb76d34dbf2d946ee9589b784ad6a1caaf740358ab3bf305194bcc13b7a60a9b7a7cfb0f18c06b4d05d838da7cbd422037d659d1ea930bf09b6bfbcf2b6acbdcf7eb82f70c2851f641aaddf43f0d0aa144de26ba5b71499f14db676ba8e167126d8443fa48fe90ffea291f38fbd686e1a1855403b7be92d642eeea9335a6ead8339b75cc47c957ea95cb3533e38e8ea768d0f7ee9da81d210f2e8c22ba667fec6f5ba3506e22f4727a5da5475ac8bd5595587447fbda95ca8387653eb964a9644ae15ab413dda036e7beaf267d0ebab99dac7da20d05d07d52a6790e4e9292dd2391de3707dd7b148ef205e7b70aaf765a6a2f98eebff43b6fed54c66703ff57321c18ae8df22bcf9a56471a15862780755315f8893b8e2da146b47105c35c5b4e1dc408a05392414b93df355abaff9dfe773e02661e1172dcde9ee9fd7e0e5e2c51d1c515abf92e9edda1849a2e98a092e2877204ef29c38c9ece4e1c337d58634dd04e7a72667e1c58fd1c80fa7aa0b603cadb2a8d3a29fc571454292e91322d672d5b8789fe2fa87cf1cccecf979d70ca5c9ce94faf969bc28e97542e3537748b836cd34fdcc1e26fba187d2b5cd006526c3a07a8927581dae2f021f66f682d7f0baf576f2898c39552acfdd22aa865302f8714d5e5bd7bce59083ebfb4adaacc4e0537c600990b81f561a235756b9aff5b5fc7cd66a6fd5fcc879359e629983da4febcfae9efc9f44e2dc1b03071aead764c8f5ff6155c856a70f45b212a7ac67b85e3fc9812bfb38a731238bcb586dec5115866b66fe38bfc233e1591f8dd06aadd3897e1d9854713e8d787063bb569d7b905a09714b4d637760ac8ac6317662f46a0995e131c27161924bdfd2ccd67a57c896d787fc9e86bb4c38a96f41cb212e29c96db4002353190116b4ec909873917ef92799a9aa44b1c369aac8e88f2c269c43a45f04079b7cda45fd07a159b46dedd1ceef19d49db62f9e43ec9544a4db43897a77d9fa112ddc6a7d710ee8182c26de9456b86ad298752e7ab5d44dafd77516cc07b88b0023c97cd661d7ea1bbecae55e70fc798a4afc82121e5c73d4fc981bb3fe104a3a6264f50af7b810d84a0d951c46c762e3307926b147b5208618a293095ddd30babe87eae14bfd6f769898bb37aeab838c1d905a416e0466416cceed47a4562e973b42dee8ceb630c9f989c2cd350c7d90e7becd6de3857ce1764ab3170326afbf04cfc324822b72d5fb9822ec70059d1981cdc80194b4a916f46cf1cafc313a91dc66ec228946c5bb47901ae08b71fa01e2f0f20ca7b1ada4c4ec3e8c118783c28e54bcf3b3f711065c658eefed18f0fc7d30121b733c7e6e9c151439b0b499a665c5d7485f5cc1f25784273c1a4d5b3f53c0b58d905781cdd094c6b19eee7777af857e9851c27a176e6c600025c3d1748566bcc05daa9020d8f3b8a16ca7f82b021db24f12838347856711431c0bbe693c71cbfb9dcfb8cbcdc0f01e98802c9da30dabc1379ac829076600eed11ab2c14eaa7335bbe8b25fda04f8c4d856cae9a630f7b10b0dfa2c4dd9a557b77a42e70060d13172428070b5b92861c9c451507cf2b1c488ce6ce1aa7c3a247cdb7d56ce4a81e5cc3e932b242b61a4086b3e444ab5499369f2a0fa3c8ac868c934f0fcc5cdc00bb059a1738ed10e2878dff3288f6b6155b7fe4f29352ef5afc75efafb232adf73352a6a0560560b6011bf9a529eb91fe4e849a6d63722ec9c365f3b54f2ae6f368a2a7df02c10e1eb4c3d9064406a75a21e38cb133cc9cc605b4923394b09204780e0fea0a3b210bf143d5f5e5edb53b471b75efe1ebab2a7bb3135be5a9061aed467285e9b1ee1992d161cec35a6ff4cfa85e7d4f29c6556c70362c512d18861a5754a9f9e1e2218a76c1ad69abb80e51da604711abf6379c151e105d62853060d7ed2e6b4699d9377f1b4b55c057bd8f9932ada7e4ad57f293ca781d993a40989a95475943d7597f1ad863beeb93bcdd32bb52bc3df53004f9be74bd494f6a797c0440dc929c26cbee7cc2c4fa4a68ec1e1139b0d519e3334f670dae74cd954eb34dfb563f835f8d6771dffcaf64f61aea7f055ad83427b75aec92c2066caa4a99160ab3338fde8dd60e117cbeed0f87d5fd5c59036f16d5d363f836532772d63cbdd900f6b55ede7df0bb18e080cd44e91e75b1622920dd80529cc8e60e6d6f0f025fb0322f4735c54e7ab7421d8c0fba6598fe2c24afbd6784560acfb349f948c43c879b95df4354e8b024a8179da242f9ca90bfe2e57dc88d0904d478bee9fadc6ed64c360d011b97ce3239877659980c6585dd5aca9af266af12727f11998b26ee89b7e697e0f55ca5a9f7564eb9441d25beba52c56a2b47ed4d651fee7b6958b8f30bca43b671a759d8ccc45f1a591ec81e77e7189e701dedc9d20e618d15261c95435b368078646fddd9911521348168a319e1ca2d443cdec4a4cdc1b9031d324710f375ae6a3e303d169fa24a75a9b9d260b91b71dce6db6e58bea81422ec35496ae5f7a4d506ebeeec6883f2ba2e512bef51b2d3cd2da2eec6d7b320ea8a747b11192a3cd6267c885ae55df1097c66d2dffcf3ac297b9da49e35862eb69a67590c4ad972976ec85db22ad42c86f9f80924619b93d6877c61b6ad90abb22c0305b2cbd32953bd73f6b90fbfd95ee9be5a8276b2c014777c77395375bccb1ef51673f6ec9bfcc0290982664fb9f8087518500c52071721add3c17d70a60eee1707a1dbdc3b2bd9b098067470c9dcb06964e9426658d48205bc5dfd253708878a0eb7511f98babb73ae208f9efbbfc2ce01439b4dca4af18108181929b0b77cdbab7b7261e505a8fac95761aaf47455d9703d41f76e6ddefc7a8c81191f4fb6864b6f86840aee9fabd5b8c0abc7265c9c0a634d19470ce3b560bb82b7363fb68590af4fde1945ad2a5152bdf29ea0efe44daf39d0842968e882f5042ff70714309961bd89cabb3bf75b91adbd5c2b13f36ac92320add58fa41b85240111ea5ffaefbf823f198391a05ce184f179c927dd662ed2a8537bf0865905267ecfdcbd9af18ac9ac780f8f2fbf95c5622f21631c213b22b4542053cbf9bdcb60977e349011ad2f50a7efc74556eb5f20b29fd97ed6e98659a4c935dd8410c45d6aa64a86b69af64382f0a3b53f43d356bd446d0c686982eb11fe69cee52d32292921ad4c85e7db7b4326f09a795f67d36dcddc3a95fe40dd8c2df3f660e946dc134c2d49e53a80f86916c6b7c93fec9c723e18d4fd338825f427db687de41a4dc0ee43f2df659ace91ab7bc18ff1d1a4ebb8a85a9f727a7c23562372ce1e1377f5bcd236f54024e73bc35aa5ff21984ea5a0c1e790527d2f66b196a94f1a3ac2e049605c5d50c1c8f5b4c17e91840816bb403b8ae94171560d47267f673495a5db043ea2ef7f590f7f7af879e03e6318884b429079ed7d75d5f3ac34cdf51cf419c989bd286b15944bc2e8b17d2492f7e691773eb47349c3262e6c29fc037b0ad2dea2df30a2bcb0ac623c2c9794d09dbc5464a5082d4cb758f96d1bef92b99022db3984805f561ee8d22873504c7deb213197c69c923ae29264d4c45cf6cf0de15be4e3db71da7c0866dd8bfcd45910b9c4b6913327a0d9cdeb1b8214c76424a4f9c8268b4e5220dfb09b89890d82150d82bc44357ab36419832d84daa81b815b679353d512d35f82cb51ecc930c908ec4b964374373892541ac0d432803bb79e5b260d5717d7871d055c6c610fc502e93ce56bbfab6908d4d969213a133b3e5672c5cc39391f8b9bba7177d224273345cae98c512850dd38e8627a6ee46e5a209d7cdbf13777473010ea08c57bb2781f2cbdf3874c8cc26adb660436a225a3e1458b66fd37b36247b8cec90b81f5f5d4fabc080e034a102c9ce89632be139f7a7aee562fd2d9c4c6e8282cb0b5f5e8b286f75ac0a213aa3e3b9d21301bad146a56c2a974cce2e1d25aaa2aafbb1782adbadabbcd62ca7f453e43629bc032c4b6044a6d2c2a6b22c970a15ac6e81e2269120631900e3a641e487e80b7bb36ab37bacf422c10f6f68a091da6e3417c884f38a1295216ef608c75c1b2d5100ddc5419947b7df530a2a91ad18a141f1cadf5b62f2441df3cccaff86eda507b5d86f02c2ec5d15a79fbb44f9af8130bb726f6fecc653eb3b643e2be2c4096e69c1cef1801decd760f8ba1928e619c063313fae2840c2e6e67ddf9c7b93a23003e92c180881a44491482762b59f8883eb8e1e41cd075a86e8dc0aa6d3735fea026d0f9139dab886712ca8a2415c8d595d69ceabc0a6843ad47afb8731cf621cca90fb23b4420c6d5365f6c27ec1b46c21393a6e194771cbd8f090f3f83a62e2bc6ea614f990b5d891277e2826bdaf76c5eee181ba9539a78e1c41c368c90ed7f7841fea2978691e72c233746bccecd34a758ddcf816bd466f3895b5fce7a9db34e5ee4341c7d9b2d92f7c66a01be872f20c6a00aabc7a31ecefd8dc49de5517944c1a7bedcbb7394ff1c7c4a82f8e8d3916a09ac70634084be927ee2d374a12f8d138e8a52a2771213390f34abf6705fee8867855b7516050964a56267c0e1d7bed16e21efdb2405f684e356331a4ae90227cfa7ec48c5ae52e85bdf4d940bc47d0f53aae90aafc7fa287b1be50a5a25d36b9be39fefd3d9454ab2ec9e83ad44eff7396797fba0bbf578bfa37ce171d445c93b6f2fcc6d5398a03ad32b22bd6c66f4d9314891aecf20d6c1de098e2724209ae41d58a70ea89a3e13ca199d980a0bd8680771d826743da8ac44633c45e3682bc7f6fd5729a5916a5ed568ece97a4912af9f78f537b748c5e3058a7e35b535", 0x1000, 0x3}], 0x46414, &(0x7f0000001780)=ANY=[@ANYBLOB="626cd41b3a0630783030303030304c3030303030313030302c6e6f6a6f6c6965742c6e6f726f636b2c6e6f6a6f6c6965742c6d61703d61636f726e2c6d61703d6f66662c736d61636b6673726f6f743d2f6465762f7a65726f002c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',audit,smackfsdef=,seclabel,context=user_u,uid>', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000002,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r4, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x7) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x4}, 0x6) (rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)="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", &(0x7f00000002c0), 0x24, r8}, 0x38) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000400)={0x20000010}) (async, rerun: 32) r9 = gettid() (async) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x4003, 0x0) (async) syz_io_uring_submit(r5, r2, &(0x7f0000001940)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000018c0)=@rc={0x1f, @any, 0x3}}, 0x10001) connect$inet(r10, &(0x7f00000003c0)={0x2, 0x4e24, @multicast1}, 0x10) tkill(r9, 0x7) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x8, 0x6, 0x8, 0x0, 0x81, 0xa22c1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x8, 0x6, 0x6, 0x3, 0x9, 0x100, 0x86c8, 0x0, 0x1000, 0x0, 0x400}, r9, 0xb, r3, 0x0) 08:24:28 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) splice(r3, &(0x7f00000000c0)=0xa90c, r1, &(0x7f0000000180), 0x5, 0x2) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) (async) splice(r3, &(0x7f00000000c0)=0xa90c, r1, &(0x7f0000000180), 0x5, 0x2) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:28 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2412.743704][T29213] loop5: detected capacity change from 0 to 8 [ 2412.749906][T29214] loop1: detected capacity change from 0 to 140 [ 2412.767171][T29214] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2412.791132][T29214] EXT4-fs (loop1): get root inode failed [ 2412.796880][T29214] EXT4-fs (loop1): mount failed [ 2412.833558][T29225] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:33 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 08:24:33 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d64000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd=r3, 0x10000, &(0x7f0000000040)="c02c72645ab9c5ba7d4ef0ff4a19572712789fc461ad4261d128e90b6b79902dd679fe60c2", 0x25, 0x18}, 0x200) 08:24:33 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="000000000000bc4b24a57a9deea9eb043a4b903a2f7d000db280096381016564cd9524248fdc5c766022c573643903ced1db2c1e603a100fae667b4bb11e4fdb1841801439d912662cddf86f19a9f023cb2d0c94deb894dc4747bf84e29f1566394d9195887fff7b057010a56c96c220ec5fe0141fdc30284ffd60268e6203c42b359f21331cf25b6551e7c41143cca9c5e7382277d05bff21716efae1b2d320e083528571f6c3c13d75a05bc8d01b5f14", 0xb1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/154, 0x9a, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:33 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x4, @private2, 0xfffffff8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x48) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:33 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r4 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) io_uring_enter(r1, 0x3a4a, 0xf762, 0x0, &(0x7f00000001c0), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r8}, 0x38) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f00007b2000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r4, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f00000002c0)=@generic={0x22, "7241fb4725e3f650179ba861556ecd02c5128bc9ebf140fe40c98c8df711481a00ed76427841ccebdb7c2d8420e2cf8914b41e0445333b303741088e5903c08376bfff7e54354b8654d1e0a603ccdf1532f3236c5a5b5fef379e249c092158c2d519d2d3bc49bd2bbc20d6ea234415bd5b236cb7dd865a7d1b5f5febd723"}, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x401) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2417.506953][T29244] loop1: detected capacity change from 0 to 140 [ 2417.542678][T29244] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2417.590805][T29244] EXT4-fs (loop1): get root inode failed [ 2417.596493][T29244] EXT4-fs (loop1): mount failed 08:24:33 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d64000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd=r3, 0x10000, &(0x7f0000000040)="c02c72645ab9c5ba7d4ef0ff4a19572712789fc461ad4261d128e90b6b79902dd679fe60c2", 0x25, 0x18}, 0x200) 08:24:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/154, 0x9a, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:33 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000d64000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd=r3, 0x10000, &(0x7f0000000040)="c02c72645ab9c5ba7d4ef0ff4a19572712789fc461ad4261d128e90b6b79902dd679fe60c2", 0x25, 0x18}, 0x200) 08:24:33 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2417.743839][T29262] loop1: detected capacity change from 0 to 140 [ 2417.780166][T29262] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:34 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) r4 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) io_uring_enter(r1, 0x3a4a, 0xf762, 0x0, &(0x7f00000001c0), 0x8) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r8}, 0x38) (rerun: 32) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f00007b2000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r4, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f00000002c0)=@generic={0x22, "7241fb4725e3f650179ba861556ecd02c5128bc9ebf140fe40c98c8df711481a00ed76427841ccebdb7c2d8420e2cf8914b41e0445333b303741088e5903c08376bfff7e54354b8654d1e0a603ccdf1532f3236c5a5b5fef379e249c092158c2d519d2d3bc49bd2bbc20d6ea234415bd5b236cb7dd865a7d1b5f5febd723"}, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x401) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2417.851549][T29262] EXT4-fs (loop1): get root inode failed [ 2417.857263][T29262] EXT4-fs (loop1): mount failed 08:24:34 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000040)=""/53, &(0x7f0000000180)=0x35) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:34 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) poll(0x0, 0x0, 0x0) (rerun: 64) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) r4 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async, rerun: 32) io_uring_enter(r1, 0x3a4a, 0xf762, 0x0, &(0x7f00000001c0), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r8}, 0x38) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f00007b2000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r4, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f00000002c0)=@generic={0x22, "7241fb4725e3f650179ba861556ecd02c5128bc9ebf140fe40c98c8df711481a00ed76427841ccebdb7c2d8420e2cf8914b41e0445333b303741088e5903c08376bfff7e54354b8654d1e0a603ccdf1532f3236c5a5b5fef379e249c092158c2d519d2d3bc49bd2bbc20d6ea234415bd5b236cb7dd865a7d1b5f5febd723"}, 0x0, 0x0, 0x1}, 0x9) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x401) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2418.257543][T29282] loop1: detected capacity change from 0 to 140 08:24:34 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="000000000000bc4b24a57a9deea9eb043a4b903a2f7d000db280096381016564cd9524248fdc5c766022c573643903ced1db2c1e603a100fae667b4bb11e4fdb1841801439d912662cddf86f19a9f023cb2d0c94deb894dc4747bf84e29f1566394d9195887fff7b057010a56c96c220ec5fe0141fdc30284ffd60268e6203c42b359f21331cf25b6551e7c41143cca9c5e7382277d05bff21716efae1b2d320e083528571f6c3c13d75a05bc8d01b5f14", 0xb1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="000000000000bc4b24a57a9deea9eb043a4b903a2f7d000db280096381016564cd9524248fdc5c766022c573643903ced1db2c1e603a100fae667b4bb11e4fdb1841801439d912662cddf86f19a9f023cb2d0c94deb894dc4747bf84e29f1566394d9195887fff7b057010a56c96c220ec5fe0141fdc30284ffd60268e6203c42b359f21331cf25b6551e7c41143cca9c5e7382277d05bff21716efae1b2d320e083528571f6c3c13d75a05bc8d01b5f14", 0xb1}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:34 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 08:24:34 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 08:24:34 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000040)=""/53, &(0x7f0000000180)=0x35) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:34 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x48004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf7b0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4524}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) io_uring_enter(r6, 0x1739, 0x400000, 0xeb9a7a4e4fa45ec8, 0x0, 0x0) [ 2418.302978][T29282] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2418.315013][T29282] EXT4-fs (loop1): get root inode failed [ 2418.320742][T29282] EXT4-fs (loop1): mount failed 08:24:34 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x48004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf7b0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4524}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) io_uring_enter(r6, 0x1739, 0x400000, 0xeb9a7a4e4fa45ec8, 0x0, 0x0) 08:24:34 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x48004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf7b0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4524}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) io_uring_enter(r6, 0x1739, 0x400000, 0xeb9a7a4e4fa45ec8, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x48004) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf7b0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4524}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) (async) io_uring_enter(r6, 0x1739, 0x400000, 0xeb9a7a4e4fa45ec8, 0x0, 0x0) (async) 08:24:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:34 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="000000000000bc4b24a57a9deea9eb043a4b903a2f7d000db280096381016564cd9524248fdc5c766022c573643903ced1db2c1e603a100fae667b4bb11e4fdb1841801439d912662cddf86f19a9f023cb2d0c94deb894dc4747bf84e29f1566394d9195887fff7b057010a56c96c220ec5fe0141fdc30284ffd60268e6203c42b359f21331cf25b6551e7c41143cca9c5e7382277d05bff21716efae1b2d320e083528571f6c3c13d75a05bc8d01b5f14", 0xb1}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:34 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2418.432607][T29332] loop1: detected capacity change from 0 to 140 [ 2418.463715][T29332] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2418.492134][T29332] EXT4-fs (loop1): get root inode failed [ 2418.497851][T29332] EXT4-fs (loop1): mount failed 08:24:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:34 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000040)=""/53, &(0x7f0000000180)=0x35) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:34 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2418.663646][T29347] loop1: detected capacity change from 0 to 140 [ 2418.698274][T29347] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2418.743213][T29347] EXT4-fs (loop1): get root inode failed [ 2418.748930][T29347] EXT4-fs (loop1): mount failed [ 2418.809557][T29356] loop1: detected capacity change from 0 to 140 [ 2418.843586][T29356] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2419.046089][T29356] EXT4-fs (loop1): get root inode failed [ 2419.051852][T29356] EXT4-fs (loop1): mount failed 08:24:37 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 08:24:37 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5354, 0x0, 0x40000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) r4 = dup2(r3, r3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0xc, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x4, 0xa, 0x1, 0xfffffffffffffff1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6d}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x66}], &(0x7f0000000480)='GPL\x00', 0x2, 0xbe, &(0x7f00000004c0)=""/190, 0x41000, 0xf, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0xfffffffd, 0x6}, 0x10, 0x129f1, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r3, r0, r3, r3, r3, r3, r3, r3, r3, r3]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x6, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x4, 0x0, 0x8, 0x4, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc000, 0x0, 0x0, 0x0, 0x551}, @alu={0x4, 0x1, 0x3, 0x3, 0xb, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}], &(0x7f0000000240)='syzkaller\x00', 0x7c22, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x3, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x7, 0x9, 0x6, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f00000006c0)=[r3]}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r3, 0x8, &(0x7f0000000140)=""/87, 0x57, 0x16}, 0x0) r6 = syz_clone(0x80050000, &(0x7f0000000800)="5adb6fe37242987938ca581886f7e96c8c4bfeac226840a051433bc8c780172e7775bf432f76431323d1b955421736c19c4915fc88d48e149a07556e734e4b8ebd5a2240bfbb1f04111aa9155ddbe16f51cb15423979eb559113afaa9f26fdd5fecae29d97848cc69bd3179648d5fe71642e805c9507e1e22c96e86777df081236281a22aa0cbe0b517436261921a217cc59ccfda50a9718", 0x98, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000001940)="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") perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000940)="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", 0xfa}], 0x1) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:37 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3], 0xfffffecc) sendto$inet6(r0, &(0x7f0000000040)="4071d68e7a5e15f31eac4aeedf4e0217f69065f0a3e358434ece2b30a8135b8fe4a8b59bf6a6a883e801b7a3c6900ad7214a216d4b7f765c7726aef36fe0f2bf021b436324a16079840512e9bb361c5ca976338a8001edca28531d5d3906b271d6d6e78925dfd0d8c9a5dc6289166a24a7bbccc1bfb5c041361dcd9bb2be86a9957662938358234b1a9f0cba894b1982dfd7d9af3574053e22df9073", 0x9c, 0x40000, &(0x7f0000000180)={0xa, 0x4e24, 0x8c2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7fff}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:37 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) poll(0x0, 0x0, 0x0) (async, rerun: 32) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:37 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3], 0xfffffecc) sendto$inet6(r0, &(0x7f0000000040)="4071d68e7a5e15f31eac4aeedf4e0217f69065f0a3e358434ece2b30a8135b8fe4a8b59bf6a6a883e801b7a3c6900ad7214a216d4b7f765c7726aef36fe0f2bf021b436324a16079840512e9bb361c5ca976338a8001edca28531d5d3906b271d6d6e78925dfd0d8c9a5dc6289166a24a7bbccc1bfb5c041361dcd9bb2be86a9957662938358234b1a9f0cba894b1982dfd7d9af3574053e22df9073", 0x9c, 0x40000, &(0x7f0000000180)={0xa, 0x4e24, 0x8c2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7fff}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x1, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3], 0xfffffecc) (async) sendto$inet6(r0, &(0x7f0000000040)="4071d68e7a5e15f31eac4aeedf4e0217f69065f0a3e358434ece2b30a8135b8fe4a8b59bf6a6a883e801b7a3c6900ad7214a216d4b7f765c7726aef36fe0f2bf021b436324a16079840512e9bb361c5ca976338a8001edca28531d5d3906b271d6d6e78925dfd0d8c9a5dc6289166a24a7bbccc1bfb5c041361dcd9bb2be86a9957662938358234b1a9f0cba894b1982dfd7d9af3574053e22df9073", 0x9c, 0x40000, &(0x7f0000000180)={0xa, 0x4e24, 0x8c2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7fff}, 0x1c) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:37 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5354, 0x0, 0x40000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) r4 = dup2(r3, r3) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0xc, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x4, 0xa, 0x1, 0xfffffffffffffff1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6d}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x66}], &(0x7f0000000480)='GPL\x00', 0x2, 0xbe, &(0x7f00000004c0)=""/190, 0x41000, 0xf, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0xfffffffd, 0x6}, 0x10, 0x129f1, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r3, r0, r3, r3, r3, r3, r3, r3, r3, r3]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x6, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x4, 0x0, 0x8, 0x4, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc000, 0x0, 0x0, 0x0, 0x551}, @alu={0x4, 0x1, 0x3, 0x3, 0xb, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}], &(0x7f0000000240)='syzkaller\x00', 0x7c22, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x3, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x7, 0x9, 0x6, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f00000006c0)=[r3]}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r3, 0x8, &(0x7f0000000140)=""/87, 0x57, 0x16}, 0x0) r6 = syz_clone(0x80050000, &(0x7f0000000800)="5adb6fe37242987938ca581886f7e96c8c4bfeac226840a051433bc8c780172e7775bf432f76431323d1b955421736c19c4915fc88d48e149a07556e734e4b8ebd5a2240bfbb1f04111aa9155ddbe16f51cb15423979eb559113afaa9f26fdd5fecae29d97848cc69bd3179648d5fe71642e805c9507e1e22c96e86777df081236281a22aa0cbe0b517436261921a217cc59ccfda50a9718", 0x98, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000001940)="fc7a4f8e2e03528b48b3c41db5e9999612fa105a412ad1b2be987fb75d259527aabffb5bf8b60f5204d2acd3eb44058262d61d2dadc2a2ee402f69e70878b3a596b348c1eac59083e241326a60bca6fec69b4cc9abf5274f5894c08cb3e8d69dfe93b2988d96ceb44c1e9bc5f02f3124c2cc336316ccf3b784f31f3f25e51528b99968ed26363104612ea7de23979dbd38f9bf905e5c633fd50d139c0028dbf3e06db092c3962c62fb63bd4ecc013a7d45ed4b448556dc2fd06d874a3344c37dacf4e7185555f53e3479096b9c17cd3c6c27fcdd4a2a89ad74f23fba86c533ce451eb146e0ce37792709364cb51fd3109c1633c25b98927bee1c8e125d32b2aadcfd798f4285a4392f6168e73cd7329d51a4df7f4c9264f1c33ad004fef8f0d462bd7080dc4ca0833d2c9a0e136a426d5ae578821a55797dc1e39db703ada28eb8743bb9857f245f4ce8588591c77e6c72fd7341fafac750f839b552d2077125e8bd803ad1e0ab6d4e448ebfce9bfa93f04a65520fc7325faf3e6a4943a0ecc05c7b2e0ee8a49ffc3b843c35ad4bd16ad3c67d6a7e237bf062aca853ea72a3ef91cf347ae1a71a73bf91b11219e002d896265baece51e8d20c7721cc16cc918af744d6f6dde0314c1343b01fc46b0f1b9533ecd185e2a1f3ea57e14a0ced5a090534a8140bc2a049f0a46882cda997ec248736e8087c174c76b0dec4615026287e0f657f5119f2b5bcaed7ae176f4c5cbf39d85aff9451b97b69db533ccdebe147f1cbdc554a5d478e5abe5dca99cc086aaa926ef2417a20e0d3347bf040012bd5d1c48095507d939f6bf05cc25422d8b5d295ddd052d8f05cf2f3ef9e0ed27ae6c18ca2454c860f04bc566a3c6c9d8420f818c264a3936a06cdfcece563c3a452eca65d081f1936325c12568e49224f9679a8dcd08b93df2ba56b44ad61f1671d1b8867300fa65d31941708109071698bde98e07008f67307801e64faf07d006c48bee8449c0534f0a83c12fb48f053562ba8edc2d097b63f3382d605d994c9b5fd201207b6e60322923505e2a9ab9302c4c506706f017557034168aaa99d785ad51afa7e34df13b033ffaac69bcd6b15c954ebd52e49c22343f80af2daecf950a6522eb0f4d2853285d4786a0a0a580943ce1507def8d139cd144522fd6811271cf1723d29bba22a1620ea9bc4509e420994201927cc6cb02d7e4d8e75fefed62e62d862758b0852c4da2fc7d0ab241fc541d835aa3e494ad5c055632c4000419078f40e0527d097a0dc105728d11d89cb6ec0b3829cda1ad013150430d7dac3d1332e5cf5eadfc8842bfd0c2bce6365915d8262f8609e97e6e7e90f81b659270c1869c11b7644b8963fec00f4836e4bd19aceaf76fcb5735bf280b2e8084dce8539909161ccd33b7c683022d643678f32689f3682a649afcae61f7785993c62373fa6ad8be3c00708165a49ac81339eb583e84b6706ec8ad20016775725c5b0ecc031cc077a5c06d463bd7602f6822d3c78d71051e8bddc14d0e166c5130f8cb157dad7a728e975a24fe2eebaea8c985d04f9ef5576315308db813ac2edcfaea889e6390bdd881a88dc95bcdbd1be38af89616cb32e06712e1817fdb2b2f216eaa2962392f1cca409328bef2f35aaabd4ff6a36892507a4cb1ccd505953a7ef4e4c031030163c460a2cd66a26098cad59ae048035e547d2bb74c90cdea6b424f134a2cfe908645aed512355ad06d6513fce7d0c54867c12b4822450c399d65af12fa3edc8ad2f1185b281c9d4389ec777610a1c2441f878a7c11692133e6182179a99afdce0d8dec6d3f6b0e8ef251bfa18afaea3feea40256d104ac7adee7b5c9ec885519cf794c7e5fb5e68ab7cf058d9820264beba9088aa68970bcbab7f4d4f7f8ef7540b4f121ab28b125815d451b8c84ad81d7fedb70afa8b8b324462b358832ecf68276552b3a11c082e039902945f1583ce01cc1393cf70a9d421658bdd39563f39618c46a68321070bbc36e500aa751c632a9ab84e558957405cc79c463c93f12c4f1dc4b6b892a0f796b0836e652bdc9dc76ac457bb4b6925e0bb0f3111790b3d370cadea3b9ab703c67a65ca694d0d33523a1b43b45096ad4767c934dd8233251d1deec4da4c22e123a1c9b1e2268aa3c7ff259bb6b1a1affc70faa5bdff0704097ca4a4cd426076a4f3df9afd910f7b77bec6b0e378674217323364d9cb25e8b68180126d05ce36f8bf162b4d3f82071053864797e467b67a0129e96be4ce37f937f8b9cd3fda725adee8ed8502354104d635329138244ebb4d13f866542d992487031154a60dbed1fae59ba4eb34bbf2f965692af942cddfef5934606690e0d4d62fd00ad1672b015edd62ed8b3ffc16755c270d493417976e8ebfd8519d05d9ccea9b3c0f73e4d9bacb9636910a228058f945f07a7f6fa53e3a69a8710965b74f465a14961c275d8f44719ec5a712af6524c4e8ee4daa19b11dfbeefb3edad75b6ca632e48540581b66336b67a73bc9e93abc1533a0cad071eeccc2133cc6e9d12cfb06ddbb2e5d551ffe25f2e44ed7c5f06eb0abe8159b9527826ae69974d6650fea06907e3d935701b0712e51a2fa6b04a462309fa491e9efb91916ecb219950507116c1c067df16333069026c6b0a0f80f4be07e3cf57279819c62e30d20cba92ce27a284a6ab665c3a7095218da4af4145c1c53fb392d98ad21f5872b4fbade61c893a4bfbd37c9dc36c4244a705c809867159c12ab4fad5df1e5e04a4c298f0eb31fa24aebe926570ab16f1cf390d7e426c742b8468c124fc405f93188d30b9a62f9a98209a8d2997f2b3f0a31cbe315cbbe6b3e8de86c7ec8defe089ff60ca8e6eff909e1feb1c7700a5e69758faac1308a25e208f562a2c75c93f7598e9ff24eb52a367a54e053f89fb00331ad29e7476f029be96d87307731301c5a84b02c0868afaf90015f91cf7819ecaef1a9c43a9c3ec6a45c8cde32a5546fbfe930def18512c2465a9bd1e0a3bab3b13e31bcb9b21c1876789720320d9530435445c551ac572230d50d7613acdd5bcbe67b8da44abc3f7c9d1a3f8fccf209995a5d621a2a534cba4f59e5eca4fd977fd60176452f491ec1e62135c104fb1e8169164ed84288f6f1933c33602626e420825b2147d76e5d98ffe28cab384a94a4f6a22c8b348613b22c28b63af9c1ec2bed3c3693a5c6887262dc33ff0f0b13e1619bede632ea6d9d6a4b5a0907db157efb1e1af11b0791776fbe8a190e1038365f2be6d1a36efe9cd38c9934d17f134f52d3906dcd25d075b4be88c50104685377083d7e6397602b2ede26f51f44df827f49981a5512c860adfd4d8c0e52f0481b98dba9c0dd97e20a90f746dae01d58faa64511924fe23434275ee41c6aa384de39379975e1796e9676bd13175c6cf534c2f6713ac1f2b75857775cad20b3c1dbd0821e238750967e4e8b6ee16fed749dfec093b9cee436a90972fcd856162d84de12e36236c70f241a27c5e7cbabbe7978622e567f7d696a15d995433346afcaae3e9c6f22d813fec38996fe5024de990bfe49df2fbf414ad949acc22511a6094e04ca376483c03c3f12f7245a7c7061f90303824495bc4bc73d3fe952273e0e0ad1399366f37a9ec7c83b882a03c80e4451ae145bb58baf23519f2e0207e65bec368916502e78484e3db4040c3633368cd3fce9a2244897ada604f428e3d58f272f88145ff4c612756e58eb77c880f2dcc865cea2e58d45ad5854d9d139abf7ecf4fb3cc9ca3615881ffd95209b51adc680a79b11cbe6f6c6eeee4334b7f1a660ca5e20e952f317e927ef769acfa56a9f0b1f5cea2cad235d8031c2502ed7a47bf045a57c153ed27be916b68c08555f4097c5ff7bad3fa7444c355b170f00043fc90e8579b05276e02985739fff2d2b58538859ae9f762e3e52568907e97e3bfb25299c2cea0f9b30c6eeaa5aa4e7a88093341356256ae1710017f242dbe586b0d1468b793629f97e276365ce73aa9a3051a9a7f1fef25d2a7301861ccefa6b3bd08535270ee2b4655d4a601a2df4239280db4f9fc391547b4d4cc018ed97cf247305e656408f94f2b7aee00aa7def3a9194a8fa5d663859c8e7c6923ae27abd9ae6cd4cd3fb919dee129d3ed218b7f875ac2200c3e7ff59d4d2102fd731259eb44e43efb3cf9c51cbc0d3322b6363a3e7b2071e84afff16575364267e2ea3e4549cbfcf4cc373d1aa35a11e0a8287dea8d829588b14966306006805a10e68f96d90da679e943b564576491c70d43c2fab003d0773108aaee3dd7a52760dbfdae767710a9451dc4baac33c5767c877dfb8edff8806294190d2c9e44c18728c6bb63f66adb6649840937e7e39e01555de8de28c608e2a03fd2146b97ac7d3d58d8cdc0cb8004fcb6e6c17151aafb67056984afb5f46958bbfe121f6f72c13743275db83fd35fffd0677272a63c884f91d227f54a7b138b56d131a1000749b5e8c5e2adb08220742b4dd817a76cecbc6cfd88c2c88a58eedc6a7e0f2cdbd47d78b51170134f8487cd3252512e3930aa9f2de82e876344d4a76b21b13516f8455e69c68f8065af5c745fbd61ad0ae7d4c706ab176ee28111e5966e7c2c4b8ca01572e5c94b5fbfc6d1862ef5261babbead103e751e7160df0aa3539a9848b8b3a48d59d0ed226b48f1d2ddb47175cdca7b08cdd3613c57687a45eb6f84f44d21026e41335b0dbf340f0223e22b4c16e7695d816371181a0d8ed13e92fff29e059526f763a1765b59816857880a97d9a996ac60266f6bf6333b093c4a793b2937632b9320db9f04048881ecbc79135969b8d75b710e653e4171d17e65b582210fff6319b36e80a50c0a7e35976f73b2e3e63a6e8a9eaf757d9f9e4e5e34766757f73c83bde9d66c0d543ab5df2a5ad0f810f9916010d6e1d9031b7e12691cd1ffcf1232ce85c7f2d9c65e1a02bcdcf5ecee78b4563456c934f903db27855c3293ae757380e4ad9c9bf0c6bf426a4ed60c286f3506d58adfb4641fa831f29a2e05aaf2f57d715a6b25fcc7b186bd4e7ff3f11faecab837225cae6708201b53600b10c4d4cac72e7495821da0fd4f2c1ccb0b8ff1d6bb0d5626657009a33d3b33a57e436a28dd5a5bcf71e636d05a0c366100452ac7dbd27f0547be3ffdaf6a72d7570c2471d0b488bbede73c01c1f5c2a733f10a8ba13e331d12b420307e013c1f251ccdc64c74afc34ba8b86104b7d87ef8de8bdfbb5120e4df1feacd44edb10bbbb3fa3a0ba3ab2b636110a0082fde6dc17bec38b2532e280b665a2451eb92141f6db1d13470d6b240758d254ef26c62d2f6087c49985349abf7ff1a0a0592ddb1d12564d955cbf582d11a829471189e9037373b0a3d9b78066fd6ec1e3fcb4fc239e048565a12ace6b670d76b2345cd3292207de0b62e12911e78e69cb694de5db8af2e30679397bc6bc8b62b03282712bbdb42ac493f592bf19acc48dbcd323df1583c367ad328ac936530bfe8fae0b6bcb8899a3d3a6673c581ce1913c0daee591517ea471b70d72473b0727c35ede024df85ad271d0300d856c0f50e17c515752466986172432035974b7c94e8a57da6803edf66823d95893bb854a2bd6da4ef422c5616aaa14c36a7f4641d9647b71cda69a502d6e735a0ac89db32674198549cc7d8b757b7a9f723d338ab554beb7bdec03673b14783bfdb43a770026cc5ebaa76fcefa55dc7e08f6e8dbce879181f5cc4134fd26b93d12f4ef8fbc910db14f42111774aefb3bb4e0147ee37dc48539af01f373415") perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000940)="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", 0xfa}], 0x1) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5354, 0x0, 0x40000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) dup2(r3, r3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0xc, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x4, 0xa, 0x1, 0xfffffffffffffff1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6d}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x66}], &(0x7f0000000480)='GPL\x00', 0x2, 0xbe, &(0x7f00000004c0)=""/190, 0x41000, 0xf, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0xfffffffd, 0x6}, 0x10, 0x129f1, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r3, r0, r3, r3, r3, r3, r3, r3, r3, r3]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x6, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x4, 0x0, 0x8, 0x4, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc000, 0x0, 0x0, 0x0, 0x551}, @alu={0x4, 0x1, 0x3, 0x3, 0xb, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}], &(0x7f0000000240)='syzkaller\x00', 0x7c22, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x3, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x7, 0x9, 0x6, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f00000006c0)=[r3]}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r3, 0x8, &(0x7f0000000140)=""/87, 0x57, 0x16}, 0x0) (async) syz_clone(0x80050000, &(0x7f0000000800)="5adb6fe37242987938ca581886f7e96c8c4bfeac226840a051433bc8c780172e7775bf432f76431323d1b955421736c19c4915fc88d48e149a07556e734e4b8ebd5a2240bfbb1f04111aa9155ddbe16f51cb15423979eb559113afaa9f26fdd5fecae29d97848cc69bd3179648d5fe71642e805c9507e1e22c96e86777df081236281a22aa0cbe0b517436261921a217cc59ccfda50a9718", 0x98, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000001940)="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") (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000940)="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", 0xfa}], 0x1) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:37 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3], 0xfffffecc) (async) sendto$inet6(r0, &(0x7f0000000040)="4071d68e7a5e15f31eac4aeedf4e0217f69065f0a3e358434ece2b30a8135b8fe4a8b59bf6a6a883e801b7a3c6900ad7214a216d4b7f765c7726aef36fe0f2bf021b436324a16079840512e9bb361c5ca976338a8001edca28531d5d3906b271d6d6e78925dfd0d8c9a5dc6289166a24a7bbccc1bfb5c041361dcd9bb2be86a9957662938358234b1a9f0cba894b1982dfd7d9af3574053e22df9073", 0x9c, 0x40000, &(0x7f0000000180)={0xa, 0x4e24, 0x8c2, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7fff}, 0x1c) (async, rerun: 32) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (rerun: 32) 08:24:38 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x5354, 0x0, 0x40000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) r4 = dup2(r3, r3) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x2b}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x0, 0x1, 0xc, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x4, 0xa, 0x1, 0xfffffffffffffff1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6d}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x66}], &(0x7f0000000480)='GPL\x00', 0x2, 0xbe, &(0x7f00000004c0)=""/190, 0x41000, 0xf, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x4, 0xfffffffd, 0x6}, 0x10, 0x129f1, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r3, r0, r3, r3, r3, r3, r3, r3, r3, r3]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x6, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x4, 0x0, 0x8, 0x4, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc000, 0x0, 0x0, 0x0, 0x551}, @alu={0x4, 0x1, 0x3, 0x3, 0xb, 0xffffffffffffffff, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}], &(0x7f0000000240)='syzkaller\x00', 0x7c22, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x3, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x7, 0x9, 0x6, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f00000006c0)=[r3]}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r3, 0x8, &(0x7f0000000140)=""/87, 0x57, 0x16}, 0x0) r6 = syz_clone(0x80050000, &(0x7f0000000800)="5adb6fe37242987938ca581886f7e96c8c4bfeac226840a051433bc8c780172e7775bf432f76431323d1b955421736c19c4915fc88d48e149a07556e734e4b8ebd5a2240bfbb1f04111aa9155ddbe16f51cb15423979eb559113afaa9f26fdd5fecae29d97848cc69bd3179648d5fe71642e805c9507e1e22c96e86777df081236281a22aa0cbe0b517436261921a217cc59ccfda50a9718", 0x98, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000001940)="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") perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000940)="9c24ce4e0ca4c9d8e0458e03d38845b1b4eea7b321bc9f21a0d5a6ed12da2255064bdf73ef87d7b329d9d487af3a66e8e8ce5d993a36f324cb5a96c58a03bdb2cfb71effd51cf1608c34575fd7f4ee53dc8dab1e2ebdc4ce71a26d7f9ed99a32a2df3e060bd4696cca28a1d574cb7a67b8422b35e636fcf03c21dffa80eefa4a51cb65c81dd3847db1aed35c3fc7a42d12596767bf7b36cda471387ed7688a8cc74ca775409f56560ddfa0edd902574afa24ce61f5e9758b568a17cd609ff50be8e1aa3e981c3bec70c62b3a566f54547c75e83950ef1e5eb51a27bf2bfc270dd5c046fd8bc1ec9ff6d75244e76ea92e82bb4d88d9c215efb82b", 0xfa}], 0x1) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:38 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x207b3}, &(0x7f0000000280)=0xffffffffffffff68) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2, 0xfffffffffffffde0, "d48d28e15b88cab71e6ad8bde0379ebd03fb4732f15bac90a79d2267377f585f10a3818dad619065bd8826b890ebd1f280d190da279809df5aeffe05a3b437c0b58c08e2cc4811f27ade6174702c1e85a3ecb6726ac8e11d74756b8e8f87969d6f148ad0cb523b48e670ea85d5b6eb1db8abdd0ff94af1426436eb4889d0a768515ca8348599cc31a27988b57d197aee951c9bed82e62016c2688d18e37289064926387c37350f4e28462f738f617e17c88335b572f25e8b17"}, &(0x7f0000000400)=0xc1) close_range(r1, r0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000050800"/44, @ANYRES32=r7], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={r7, 0xffffff00}, &(0x7f0000000480)=0x8) r8 = socket$inet6(0x10, 0xa, 0x400) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000180)="8cc308de9c72e37cc84edbf8acc8d4e375a19d877a5a5fd6a2b054c35ccfbc5e46c63707eecc70df8f06d24d77594a9f851c983828f37ec8f1bb60c4bf94f1303101a2fa9cba1c52f867f4b84bfce926dd67c86262147a22376f4169c5089530e8b68b201985119fa50b6d2f790278b1454de95c63d61a0053fc57b089ead93a1ed935729d5cd9c398252e55a09acb8d73c2ee2f8b61720ada01a18707946a57abebe502f584abd7873eef1c5bcafd2554ba87f95783b0facce791542f1cc97e07cc5541553e1e85de5c9a49209cc9a0c298ce5ddd", 0xd5, 0x10, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @remote, 0xc5}, 0x1c) recvfrom$inet6(r8, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000540)="485e0500000019d1679666b20fc8f8ef15d2b508ffab1d898febceef422f6b091e439c3fac3209855209f8fc241378984ce9fed68ff9d76ff30b032f6e687cc549ca3e1d543d55afd3f73a9026bc910576dca40657fe9679ce5217aafc3c3d749004a9436af2433034cc07edbc80a69a2ef190b6718f2e51222ec64ea9664d526819b2bdda298f4793d89bf1f2601ff30e62a0dd38bdcd13919102707c1021d9252e4b4ad7f7cda71b1fe0ba15475226ddd4d7373badb825713119031dbacbd317", 0xc1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r8, 0x0, 0x400000, 0x0) 08:24:39 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 08:24:39 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = getpid() r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x14a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r7 = syz_open_pts(0xffffffffffffffff, 0x400000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r5, r0, r4, r0, r0, r0, r6, r7], 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x6613) 08:24:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:39 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x207b3}, &(0x7f0000000280)=0xffffffffffffff68) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2, 0xfffffffffffffde0, "d48d28e15b88cab71e6ad8bde0379ebd03fb4732f15bac90a79d2267377f585f10a3818dad619065bd8826b890ebd1f280d190da279809df5aeffe05a3b437c0b58c08e2cc4811f27ade6174702c1e85a3ecb6726ac8e11d74756b8e8f87969d6f148ad0cb523b48e670ea85d5b6eb1db8abdd0ff94af1426436eb4889d0a768515ca8348599cc31a27988b57d197aee951c9bed82e62016c2688d18e37289064926387c37350f4e28462f738f617e17c88335b572f25e8b17"}, &(0x7f0000000400)=0xc1) (async) close_range(r1, r0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000050800"/44, @ANYRES32=r7], 0x30}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={r7, 0xffffff00}, &(0x7f0000000480)=0x8) (async) r8 = socket$inet6(0x10, 0xa, 0x400) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000180)="8cc308de9c72e37cc84edbf8acc8d4e375a19d877a5a5fd6a2b054c35ccfbc5e46c63707eecc70df8f06d24d77594a9f851c983828f37ec8f1bb60c4bf94f1303101a2fa9cba1c52f867f4b84bfce926dd67c86262147a22376f4169c5089530e8b68b201985119fa50b6d2f790278b1454de95c63d61a0053fc57b089ead93a1ed935729d5cd9c398252e55a09acb8d73c2ee2f8b61720ada01a18707946a57abebe502f584abd7873eef1c5bcafd2554ba87f95783b0facce791542f1cc97e07cc5541553e1e85de5c9a49209cc9a0c298ce5ddd", 0xd5, 0x10, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @remote, 0xc5}, 0x1c) recvfrom$inet6(r8, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000540)="485e0500000019d1679666b20fc8f8ef15d2b508ffab1d898febceef422f6b091e439c3fac3209855209f8fc241378984ce9fed68ff9d76ff30b032f6e687cc549ca3e1d543d55afd3f73a9026bc910576dca40657fe9679ce5217aafc3c3d749004a9436af2433034cc07edbc80a69a2ef190b6718f2e51222ec64ea9664d526819b2bdda298f4793d89bf1f2601ff30e62a0dd38bdcd13919102707c1021d9252e4b4ad7f7cda71b1fe0ba15475226ddd4d7373badb825713119031dbacbd317", 0xc1}], 0x1) (async) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r8, 0x0, 0x400000, 0x0) 08:24:39 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 08:24:39 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x1b41, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x7, 0xb71b, 0x2c, 0x100, 0x3]}, &(0x7f0000000000)=0x54) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) accept(r5, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:39 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x207b3}, &(0x7f0000000280)=0xffffffffffffff68) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2, 0xfffffffffffffde0, "d48d28e15b88cab71e6ad8bde0379ebd03fb4732f15bac90a79d2267377f585f10a3818dad619065bd8826b890ebd1f280d190da279809df5aeffe05a3b437c0b58c08e2cc4811f27ade6174702c1e85a3ecb6726ac8e11d74756b8e8f87969d6f148ad0cb523b48e670ea85d5b6eb1db8abdd0ff94af1426436eb4889d0a768515ca8348599cc31a27988b57d197aee951c9bed82e62016c2688d18e37289064926387c37350f4e28462f738f617e17c88335b572f25e8b17"}, &(0x7f0000000400)=0xc1) close_range(r1, r0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet_sctp(0x2, 0x5, 0x84) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000050800"/44, @ANYRES32=r7], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={r7, 0xffffff00}, &(0x7f0000000480)=0x8) r8 = socket$inet6(0x10, 0xa, 0x400) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000180)="8cc308de9c72e37cc84edbf8acc8d4e375a19d877a5a5fd6a2b054c35ccfbc5e46c63707eecc70df8f06d24d77594a9f851c983828f37ec8f1bb60c4bf94f1303101a2fa9cba1c52f867f4b84bfce926dd67c86262147a22376f4169c5089530e8b68b201985119fa50b6d2f790278b1454de95c63d61a0053fc57b089ead93a1ed935729d5cd9c398252e55a09acb8d73c2ee2f8b61720ada01a18707946a57abebe502f584abd7873eef1c5bcafd2554ba87f95783b0facce791542f1cc97e07cc5541553e1e85de5c9a49209cc9a0c298ce5ddd", 0xd5, 0x10, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @remote, 0xc5}, 0x1c) recvfrom$inet6(r8, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000540)="485e0500000019d1679666b20fc8f8ef15d2b508ffab1d898febceef422f6b091e439c3fac3209855209f8fc241378984ce9fed68ff9d76ff30b032f6e687cc549ca3e1d543d55afd3f73a9026bc910576dca40657fe9679ce5217aafc3c3d749004a9436af2433034cc07edbc80a69a2ef190b6718f2e51222ec64ea9664d526819b2bdda298f4793d89bf1f2601ff30e62a0dd38bdcd13919102707c1021d9252e4b4ad7f7cda71b1fe0ba15475226ddd4d7373badb825713119031dbacbd317", 0xc1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r8, 0x0, 0x400000, 0x0) pipe2(&(0x7f00000000c0), 0x80800) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x207b3}, &(0x7f0000000280)=0xffffffffffffff68) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2, 0xfffffffffffffde0, "d48d28e15b88cab71e6ad8bde0379ebd03fb4732f15bac90a79d2267377f585f10a3818dad619065bd8826b890ebd1f280d190da279809df5aeffe05a3b437c0b58c08e2cc4811f27ade6174702c1e85a3ecb6726ac8e11d74756b8e8f87969d6f148ad0cb523b48e670ea85d5b6eb1db8abdd0ff94af1426436eb4889d0a768515ca8348599cc31a27988b57d197aee951c9bed82e62016c2688d18e37289064926387c37350f4e28462f738f617e17c88335b572f25e8b17"}, &(0x7f0000000400)=0xc1) (async) close_range(r1, r0, 0x2) (async) pipe(&(0x7f0000000080)) (async) socket(0xa, 0x1, 0x0) (async) close(r5) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) sendmmsg$inet_sctp(r5, &(0x7f0000002900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000050800"/44, @ANYRES32=r7], 0x30}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={r7, 0xffffff00}, &(0x7f0000000480)=0x8) (async) socket$inet6(0x10, 0xa, 0x400) (async) sendto$inet6(r8, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) sendto$inet6(r8, &(0x7f0000000180)="8cc308de9c72e37cc84edbf8acc8d4e375a19d877a5a5fd6a2b054c35ccfbc5e46c63707eecc70df8f06d24d77594a9f851c983828f37ec8f1bb60c4bf94f1303101a2fa9cba1c52f867f4b84bfce926dd67c86262147a22376f4169c5089530e8b68b201985119fa50b6d2f790278b1454de95c63d61a0053fc57b089ead93a1ed935729d5cd9c398252e55a09acb8d73c2ee2f8b61720ada01a18707946a57abebe502f584abd7873eef1c5bcafd2554ba87f95783b0facce791542f1cc97e07cc5541553e1e85de5c9a49209cc9a0c298ce5ddd", 0xd5, 0x10, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @remote, 0xc5}, 0x1c) (async) recvfrom$inet6(r8, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000540)="485e0500000019d1679666b20fc8f8ef15d2b508ffab1d898febceef422f6b091e439c3fac3209855209f8fc241378984ce9fed68ff9d76ff30b032f6e687cc549ca3e1d543d55afd3f73a9026bc910576dca40657fe9679ce5217aafc3c3d749004a9436af2433034cc07edbc80a69a2ef190b6718f2e51222ec64ea9664d526819b2bdda298f4793d89bf1f2601ff30e62a0dd38bdcd13919102707c1021d9252e4b4ad7f7cda71b1fe0ba15475226ddd4d7373badb825713119031dbacbd317", 0xc1}], 0x1) (async) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r3, 0x0, r8, 0x0, 0x400000, 0x0) (async) [ 2423.829168][T29424] loop1: detected capacity change from 0 to 140 [ 2423.881845][T29424] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2423.896127][T29424] EXT4-fs (loop1): get root inode failed [ 2423.901816][T29424] EXT4-fs (loop1): mount failed 08:24:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:40 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25720000000c0099007f00000060000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, 0x0, 0x88000cc, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:40 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x8000}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x5, @private0, 0x5}], 0x84) [ 2423.999862][T29433] loop1: detected capacity change from 0 to 140 [ 2424.034792][T29433] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2424.068291][T29433] EXT4-fs (loop1): get root inode failed [ 2424.073972][T29433] EXT4-fs (loop1): mount failed 08:24:40 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = getpid() r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x14a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r7 = syz_open_pts(0xffffffffffffffff, 0x400000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r5, r0, r4, r0, r0, r0, r6, r7], 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x6613) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) getpid() (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x14a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x3) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) syz_open_pts(0xffffffffffffffff, 0x400000) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r5, r0, r4, r0, r0, r0, r6, r7], 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x6613) (async) [ 2424.130659][T29452] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2424.209418][T29456] loop1: detected capacity change from 0 to 12 [ 2424.224747][T29456] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (6 blocks) 08:24:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:40 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="476515c48baed9acd751f3d70997bec94bb803ffd2040b291529337e45b8facee0484fe18f6eec58628c86169db27933dc5c685e30535a6ba0f51e0327096990e020a1d246bf741eb4d517ff136fa4c5a18f56ba5520cf4ed4bf33ebb57aab732ce7f29046c2dafa6d73e9d74564eb567f5e0d49dc8849c3477745c7b62b38834c684e0f954ec2b8c9e05804ded80af0784ae853a48253d4704535a81a63ec89a9978538833f3cdee619447aa372b2384baacfaf1989ad2aeaa75837dda8b17878d1639b6710ddf7b87600269bb6094494de137271d64a7584ec6d0d18c686ae52e45d5ba9dfe7f7a70c0cbdbba021cafa57fe32669c007e4ff1083bf1dc892dc85c83f2588af471af54a929ecde0924d326d450822833497b5dd86c32293fef0f8bcfbd5659558d38017ae025", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25720000000c0099007f00000060000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, 0x0, 0x88000cc, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 64) r4 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:40 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25720000000c0099007f00000060000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, 0x0, 0x88000cc, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25720000000c0099007f00000060000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r2, 0x0, r3, 0x0, 0x88000cc, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r4, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2424.378980][T29472] loop1: detected capacity change from 0 to 12 [ 2424.400544][T29472] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (6 blocks) 08:24:41 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x8000}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x5, @private0, 0x5}], 0x84) 08:24:41 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 08:24:42 executing program 4: r0 = socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x1b41, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x7, 0xb71b, 0x2c, 0x100, 0x3]}, &(0x7f0000000000)=0x54) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) (async) accept(r5, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:42 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x8000}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x5, @private0, 0x5}], 0x84) 08:24:42 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/nf_conntrack_expect\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{0x5, 0x80}, 'port1\x00', 0x4, 0xc20, 0x10001, 0x5, 0x9, 0x3, 0x94, 0x0, 0x2, 0x4}) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00008ab000/0x2000)=nil, 0x2000, 0x300000a, 0x20010, r0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x149, 0x4c0300, 0x31713, {0x0, r10}}, 0x6) 08:24:42 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = getpid() r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x14a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r7 = syz_open_pts(0xffffffffffffffff, 0x400000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r5, r0, r4, r0, r0, r0, r6, r7], 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x6613) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) getpid() (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x14a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x3) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) syz_open_pts(0xffffffffffffffff, 0x400000) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r5, r0, r4, r0, r0, r0, r6, r7], 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x6613) (async) 08:24:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:42 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 2426.728790][T29515] loop1: detected capacity change from 0 to 12 [ 2426.760756][T29515] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (6 blocks) 08:24:42 executing program 4: r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x1b41, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x7, 0xb71b, 0x2c, 0x100, 0x3]}, &(0x7f0000000000)=0x54) (async, rerun: 32) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) accept(r5, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:42 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:42 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x4, &(0x7f0000000500)=""/130, 0x82}, 0x2}, {{&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000000640)=[{&(0x7f0000000780)=""/249, 0xf9}], 0x1, 0xfffffffffffffffd}, 0x7}, {{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/92, 0x5c}], 0x3, &(0x7f0000000a40)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000040, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000c00)=0xa6, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)={0x2c, r5, 0x71a, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0xc010) 08:24:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2426.766259][ T24] audit: type=1400 audit(1659515082.872:180394): avc: denied { map } for pid=29505 comm="syz-executor.3" path="/proc/29505/net/nf_conntrack_expect" dev="proc" ino=4026533114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 08:24:43 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x4, &(0x7f0000000500)=""/130, 0x82}, 0x2}, {{&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000000640)=[{&(0x7f0000000780)=""/249, 0xf9}], 0x1, 0xfffffffffffffffd}, 0x7}, {{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/92, 0x5c}], 0x3, &(0x7f0000000a40)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000040, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000c00)=0xa6, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)={0x2c, r5, 0x71a, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0xc010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x4, &(0x7f0000000500)=""/130, 0x82}, 0x2}, {{&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000000640)=[{&(0x7f0000000780)=""/249, 0xf9}], 0x1, 0xfffffffffffffffd}, 0x7}, {{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/92, 0x5c}], 0x3, &(0x7f0000000a40)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000040, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1}}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) fcntl$setstatus(r3, 0x4, 0x2800) (async) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) (async) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000c00)=0xa6, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)={0x2c, r5, 0x71a, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0xc010) (async) [ 2426.848662][T29548] loop1: detected capacity change from 0 to 140 [ 2426.848813][T29279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2426.864157][T29279] Buffer I/O error on dev loop1, logical block 0, async page read [ 2426.872516][T29549] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:43 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x4, &(0x7f0000000500)=""/130, 0x82}, 0x2}, {{&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000000640)=[{&(0x7f0000000780)=""/249, 0xf9}], 0x1, 0xfffffffffffffffd}, 0x7}, {{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/92, 0x5c}], 0x3, &(0x7f0000000a40)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000040, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000c00)=0xa6, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)={0x2c, r5, 0x71a, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0xc010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x4, &(0x7f0000000500)=""/130, 0x82}, 0x2}, {{&(0x7f00000005c0)=@tipc=@id, 0x80, &(0x7f0000000640)=[{&(0x7f0000000780)=""/249, 0xf9}], 0x1, 0xfffffffffffffffd}, 0x7}, {{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000980)=""/92, 0x5c}], 0x3, &(0x7f0000000a40)=""/94, 0x5e}, 0x3ff}], 0x3, 0x40000040, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1}}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) fcntl$setstatus(r3, 0x4, 0x2800) (async) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) (async) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000c00)=0xa6, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)={0x2c, r5, 0x71a, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0xc010) (async) 08:24:43 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2426.937848][T29548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2426.966350][T29548] ext4 filesystem being mounted at /root/syzkaller-testdir3637728185/syzkaller.hQdzu3/3562/mnt supports timestamps until 2038 (0x7fffffff) 08:24:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2427.068542][ T1833] EXT4-fs (loop1): unmounting filesystem. [ 2427.122115][T29580] loop1: detected capacity change from 0 to 140 [ 2427.142979][T29580] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2427.174452][T29580] EXT4-fs (loop1): get root inode failed [ 2427.180187][T29580] EXT4-fs (loop1): mount failed 08:24:43 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/nf_conntrack_expect\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{0x5, 0x80}, 'port1\x00', 0x4, 0xc20, 0x10001, 0x5, 0x9, 0x3, 0x94, 0x0, 0x2, 0x4}) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00008ab000/0x2000)=nil, 0x2000, 0x300000a, 0x20010, r0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r7 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) (async, rerun: 32) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x149, 0x4c0300, 0x31713, {0x0, r10}}, 0x6) 08:24:43 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x6, 0x5, 0x9, 0x0, 0x101, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xb34, 0xffffffffffffffff}, 0x80, 0x9, 0x1f, 0x2, 0x57, 0x6, 0x401, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r3, 0x9) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x9554f000) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2427.310183][T29590] loop1: detected capacity change from 0 to 140 [ 2427.339217][T29590] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2427.358312][T29590] EXT4-fs (loop1): get root inode failed [ 2427.363988][T29590] EXT4-fs (loop1): mount failed 08:24:43 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 08:24:43 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/nf_conntrack_expect\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{0x5, 0x80}, 'port1\x00', 0x4, 0xc20, 0x10001, 0x5, 0x9, 0x3, 0x94, 0x0, 0x2, 0x4}) (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00008ab000/0x2000)=nil, 0x2000, 0x300000a, 0x20010, r0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) r7 = socket$inet(0x2, 0x6, 0x0) (rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r8, 0x0, r9, 0x0, 0x88000cc, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x149, 0x4c0300, 0x31713, {0x0, r10}}, 0x6) 08:24:43 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x6, 0x5, 0x9, 0x0, 0x101, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xb34, 0xffffffffffffffff}, 0x80, 0x9, 0x1f, 0x2, 0x57, 0x6, 0x401, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r3, 0x9) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x9554f000) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x6, 0x5, 0x9, 0x0, 0x101, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xb34, 0xffffffffffffffff}, 0x80, 0x9, 0x1f, 0x2, 0x57, 0x6, 0x401, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r3, 0x9) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x9554f000) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:43 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x22, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) pipe2$watch_queue(&(0x7f0000000080), 0x80) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x9, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:43 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:43 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async, rerun: 64) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:43 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x11, 0x2, 0x0) (rerun: 64) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:43 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:43 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x22, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) pipe2$watch_queue(&(0x7f0000000080), 0x80) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x9, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x22, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x9, 0x1) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2427.666312][T29606] loop1: detected capacity change from 0 to 140 08:24:43 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket(0x22, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x9, 0x1) (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 32) [ 2427.725850][T29606] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated 08:24:43 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x6, 0x5, 0x9, 0x0, 0x101, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xb34, 0xffffffffffffffff}, 0x80, 0x9, 0x1f, 0x2, 0x57, 0x6, 0x401, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r3, 0x9) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x9554f000) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x6, 0x5, 0x9, 0x0, 0x101, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xb34, 0xffffffffffffffff}, 0x80, 0x9, 0x1f, 0x2, 0x57, 0x6, 0x401, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r3, 0x9) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) mmap(&(0x7f0000af4000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0x9554f000) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:43 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 2427.784872][T29606] EXT4-fs (loop1): get root inode failed [ 2427.790769][T29606] EXT4-fs (loop1): mount failed 08:24:43 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'hsr0\x00', {0x4}, 0x20}) socket(0x11, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000180)=0x84) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:43 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x14292, &(0x7f00000000c0), &(0x7f000046e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x80000, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4883) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000001780)=""/203, 0xcb}], 0x3}, 0x0, 0x40012004, 0x0, {0x1}}, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r9 = openat$incfs(r7, &(0x7f00000005c0)='.log\x00', 0x8000, 0xc) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000600)) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:44 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x14292, &(0x7f00000000c0), &(0x7f000046e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x80000, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4883) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000001780)=""/203, 0xcb}], 0x3}, 0x0, 0x40012004, 0x0, {0x1}}, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r9 = openat$incfs(r7, &(0x7f00000005c0)='.log\x00', 0x8000, 0xc) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000600)) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x14292, &(0x7f00000000c0), &(0x7f000046e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x80000, 0x6) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4883) (async) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000001780)=""/203, 0xcb}], 0x3}, 0x0, 0x40012004, 0x0, {0x1}}, 0x8) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) openat$incfs(r7, &(0x7f00000005c0)='.log\x00', 0x8000, 0xc) (async) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000600)) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2427.903228][T29668] loop1: detected capacity change from 0 to 140 [ 2427.933953][T29668] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2427.971126][T29668] EXT4-fs (loop1): get root inode failed [ 2427.976807][T29668] EXT4-fs (loop1): mount failed 08:24:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:44 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x14292, &(0x7f00000000c0), &(0x7f000046e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x80000, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4883) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000001780)=""/203, 0xcb}], 0x3}, 0x0, 0x40012004, 0x0, {0x1}}, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r9 = openat$incfs(r7, &(0x7f00000005c0)='.log\x00', 0x8000, 0xc) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000600)) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x14292, &(0x7f00000000c0), &(0x7f000046e000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x80000, 0x6) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4883) (async) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r6, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000001780)=""/203, 0xcb}], 0x3}, 0x0, 0x40012004, 0x0, {0x1}}, 0x8) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) openat$incfs(r7, &(0x7f00000005c0)='.log\x00', 0x8000, 0xc) (async) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000600)) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2428.073556][T29706] loop1: detected capacity change from 0 to 140 [ 2428.107749][T29706] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated 08:24:44 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'hsr0\x00', {0x4}, 0x20}) (async) socket(0x11, 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000180)=0x84) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2428.145310][T29706] EXT4-fs (loop1): get root inode failed [ 2428.151011][T29706] EXT4-fs (loop1): mount failed 08:24:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:44 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7bac, 0xc41b, 0x1, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) 08:24:44 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) poll(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'hsr0\x00', {0x4}, 0x20}) (async, rerun: 64) socket(0x11, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 32) r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000180)=0x84) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:44 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2800) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x13, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xe, [{@multicast1, 0x3}]}, @rr={0x7, 0x1b, 0x88, [@remote, @broadcast, @broadcast, @multicast2, @multicast2, @local]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0xd, 0x1}, {0x5, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:44 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x9) sendto$inet6(r2, &(0x7f0000000140)="1ba00000ca9bdc7b47e7b24105757dc8b3141a780f0f8e00000000976fc6a7fb926ce9177b77cb23c58654c74ec76165e3fda6d50000000000000fe3f15fa397d05147bee0e6817f55984d462b9a7fdb7e0406531b7680381068944f969a4acb511a5f64", 0x64, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000ac0)) getsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x6d, 0xfff, 0x0, 0x401, 0x800008, r4}) sendmmsg(r2, &(0x7f0000000a40)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0x4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="2df98ea5b5b5a5ff6cfbc0b126a079bde38274b51dc636fe9c9db74cfc63e226b9ee6c20e67deca4b3d1c70f07c268e0252aef7a1ca1e6903d7ff8709c7b98ffa70108ee7f7dd436852278465cc153ab7d6863af70178ccb3e919fa5950df863ea02f1030aa1bea82f0453095e764f807a00c79c666d", 0x76}, {&(0x7f0000000380)="cbb65e70f506dc08cc6ac3dc97cb5699bfba9fbe647648ccef9f0173a558a072b00cc0704f152e788ed6e0a23a0314776290e41f88eb73be1afc6b3edfe583c280505372aabc2dd1284dfdef8f09662e9f6e9d0813d69bbf288bdc33d119dad59125ff4a414789d0822805689a11253c9296bf77208ef8bc8c5637e3c449f8bc2374584e494f6eb8b03c7ba029b1245ea3b2cd158b136c7b41ccc0b46fd98c25189c6f5cc46613b1247f2b5aa48a688fd03c7090ee3be7bc2b4e9363b25044c94886e8477534962d6e9f", 0xca}], 0x2, &(0x7f0000000480)=[{0x98, 0x118, 0x1, "9b837c50d532bfd9ab03eb2b4e9aee7921c37071ec088752723a240b8eac89702e0ec87757d1f0860995e8510929213d90ce9f70ab495f0e71629b08a52ed6ec5d8722021123c365d5743ebea5117fedc804ff0895c23bf3eb3d02261fd584a21551594de00f6c65e5adcb5615340640edd6c213842abddef94dcdb659595aa502ffbf4c69"}], 0x98}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0f7820ac7dbca20ddf4b1a57d9dc7213ae3ea2d1ae19c01b0193be766701fae250184c2acb9377a091ff857ae0b7a91ceb5a3635823bb06962c64385bf8368e4a2e113d25fbe98959d1728d47f292931067a312cd56cb411cbc858d2fc95788d37230723f02a86206f71d3425e9a2eaff54376a358d1a4ef14720946678049bc1192da9c8e69d338833d2d7dee6575a180e55949884eba9a80f9bcfc552bb4701f218d7a848ae3", 0xa7}, {&(0x7f0000000680)="386ea5065463ef9fb79c6a39b62acd64b58041b473288033", 0x18}], 0x2, &(0x7f0000000700)=[{0xf8, 0x115, 0xffffffff, "3570305e440eab3e59a98f78a6dbb1ac75de073488fe7f5cfd14c9924b75cb49bef5d12e4d3e2032c6e4590d4aa00c6e666bd3b10b900deb3f80dadf17b5cf3718df4f4cec59aa20b5e6da8064b9a5e4c7187862d3180b5d481c8ff88f07627c623e89bc6152efc11ff8410637ef8ce13552f258f793ffb2b235fb35fbfe090e54057175118bad21b184a3154be9dda1df07564571db11d531db09f67cc1d231c28b96f32c9b170eab588f6eac2e916146883febdeb9ec65480937b50627763aae572629faba06ea2ac3c9016ab64bd43fbe054c737909346e73dec0c69ca078a67400b4"}, {0x90, 0x118, 0x5, "ac35e025c131528ac053eea1464fe0241f72e04169eb46b8516c814c93e9936fd4bea79a45a49c02b3bdbd46729478ae7174e869c94436af1d54e09f2a1bec9955dab624da7ffaa454543806d230d05d24362c4565217ec1ea6745e483d99f641ee8ceb769be39c53c0ce33eecb5be6cd6e3794b94b671e000f1ae4d9123"}, {0x70, 0x111, 0x0, "5c124575d4c76f75f2660d30f4381653bb69ffb215a30d812e00822e171f6af83b095d80875e971c44b0b66f058ddca493a8430af15e11ea7eec56296bcd2c179425394618c919eb987b0a7b9c481cb3a8cdc8ba1debca574d80b7e4c190581d"}, {0x18, 0x101, 0xfffffeff, "84"}, {0x60, 0xa6, 0x81, "7cd0d3be7f3b8e9aff3af95f35f0b918f023935f3783ad7aba9b9d48e8ce920263ee5427cee4368d4f4431704f88f592528e13352472b80ab94786a4f8de572fb5ef15cdbc6d4a9ea755f09d3a"}, {0xa8, 0x110, 0x7, "b573b6939170194cc281801db4f03cfd0678e0dd99ede78138a85e4822dd3ef345b6208f15e035d6e0c61719c1012455d495491767e4da26617d4d6f88c23f1fde1689c1392d435e34bc13898710ea25c123a1d21253da742808a9b87c5b8f4c0fd52b7135a5aa4f3e8bd4020e9bfacee8a303c4b826f91e5dbff6c86f6eb10aa1b6148ddb083d9bcd5bb1054d125a76ad9637ec35"}], 0x318}}], 0x2, 0x20) 08:24:44 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 2428.568262][T29743] loop1: detected capacity change from 0 to 140 [ 2428.623581][T29743] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: root inode unallocated [ 2428.652119][T29743] EXT4-fs (loop1): get root inode failed [ 2428.657861][T29743] EXT4-fs (loop1): mount failed 08:24:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000", 0x4f, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2428.736622][T29759] loop1: detected capacity change from 0 to 140 [ 2428.778710][T29759] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2428.824229][T29759] EXT4-fs (loop1): get root inode failed [ 2428.829955][T29759] EXT4-fs (loop1): mount failed 08:24:45 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x7bac, 0xc41b, 0x1, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) 08:24:45 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r0}, 0x38) dup2(0xffffffffffffffff, r0) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054380)={0x9, [], 0x80, "8b028ce2e72a70"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000780)={{0x0, 0x80000001, 0x3, 0xfffffffffffffff8, 0x1, 0x7fff, 0x1, 0x1, 0x5, 0xc9fb, 0x5, 0x1, 0xa8, 0x3, 0x6}}) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x141200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0xfffff7d8, 0x0, &(0x7f00000001c0)=[r6]}, 0x1) 08:24:45 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2800) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x13, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xe, [{@multicast1, 0x3}]}, @rr={0x7, 0x1b, 0x88, [@remote, @broadcast, @broadcast, @multicast2, @multicast2, @local]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0xd, 0x1}, {0x5, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) fcntl$setstatus(r1, 0x4, 0x2800) (async) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x13, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xe, [{@multicast1, 0x3}]}, @rr={0x7, 0x1b, 0x88, [@remote, @broadcast, @broadcast, @multicast2, @multicast2, @local]}]}}}}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0xd, 0x1}, {0x5, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000", 0x4f, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2429.022888][T29769] loop1: detected capacity change from 0 to 140 [ 2429.043272][T29769] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2429.063999][T29769] EXT4-fs (loop1): get root inode failed [ 2429.069722][T29769] EXT4-fs (loop1): mount failed 08:24:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000", 0x4f, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2429.149870][T29787] loop1: detected capacity change from 0 to 140 08:24:45 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 2429.211773][T29787] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:45 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r0}, 0x38) dup2(0xffffffffffffffff, r0) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054380)={0x9, [], 0x80, "8b028ce2e72a70"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000780)={{0x0, 0x80000001, 0x3, 0xfffffffffffffff8, 0x1, 0x7fff, 0x1, 0x1, 0x5, 0xc9fb, 0x5, 0x1, 0xa8, 0x3, 0x6}}) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x141200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0xfffff7d8, 0x0, &(0x7f00000001c0)=[r6]}, 0x1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r0}, 0x38) (async) dup2(0xffffffffffffffff, r0) (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054380)={0x9, [], 0x80, "8b028ce2e72a70"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000780)={{0x0, 0x80000001, 0x3, 0xfffffffffffffff8, 0x1, 0x7fff, 0x1, 0x1, 0x5, 0xc9fb, 0x5, 0x1, 0xa8, 0x3, 0x6}}) (async) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x141200) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0xfffff7d8, 0x0, &(0x7f00000001c0)=[r6]}, 0x1) (async) 08:24:45 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x7bac, 0xc41b, 0x1, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) [ 2429.260123][T29787] EXT4-fs (loop1): get root inode failed [ 2429.265790][T29787] EXT4-fs (loop1): mount failed 08:24:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2429.342229][T29799] loop1: detected capacity change from 0 to 140 [ 2429.370253][T29799] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2429.388162][T29799] EXT4-fs (loop1): get root inode failed [ 2429.393833][T29799] EXT4-fs (loop1): mount failed 08:24:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x9) sendto$inet6(r2, &(0x7f0000000140)="1ba00000ca9bdc7b47e7b24105757dc8b3141a780f0f8e00000000976fc6a7fb926ce9177b77cb23c58654c74ec76165e3fda6d50000000000000fe3f15fa397d05147bee0e6817f55984d462b9a7fdb7e0406531b7680381068944f969a4acb511a5f64", 0x64, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000ac0)) getsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x6d, 0xfff, 0x0, 0x401, 0x800008, r4}) sendmmsg(r2, &(0x7f0000000a40)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0x4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="2df98ea5b5b5a5ff6cfbc0b126a079bde38274b51dc636fe9c9db74cfc63e226b9ee6c20e67deca4b3d1c70f07c268e0252aef7a1ca1e6903d7ff8709c7b98ffa70108ee7f7dd436852278465cc153ab7d6863af70178ccb3e919fa5950df863ea02f1030aa1bea82f0453095e764f807a00c79c666d", 0x76}, {&(0x7f0000000380)="cbb65e70f506dc08cc6ac3dc97cb5699bfba9fbe647648ccef9f0173a558a072b00cc0704f152e788ed6e0a23a0314776290e41f88eb73be1afc6b3edfe583c280505372aabc2dd1284dfdef8f09662e9f6e9d0813d69bbf288bdc33d119dad59125ff4a414789d0822805689a11253c9296bf77208ef8bc8c5637e3c449f8bc2374584e494f6eb8b03c7ba029b1245ea3b2cd158b136c7b41ccc0b46fd98c25189c6f5cc46613b1247f2b5aa48a688fd03c7090ee3be7bc2b4e9363b25044c94886e8477534962d6e9f", 0xca}], 0x2, &(0x7f0000000480)=[{0x98, 0x118, 0x1, "9b837c50d532bfd9ab03eb2b4e9aee7921c37071ec088752723a240b8eac89702e0ec87757d1f0860995e8510929213d90ce9f70ab495f0e71629b08a52ed6ec5d8722021123c365d5743ebea5117fedc804ff0895c23bf3eb3d02261fd584a21551594de00f6c65e5adcb5615340640edd6c213842abddef94dcdb659595aa502ffbf4c69"}], 0x98}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0f7820ac7dbca20ddf4b1a57d9dc7213ae3ea2d1ae19c01b0193be766701fae250184c2acb9377a091ff857ae0b7a91ceb5a3635823bb06962c64385bf8368e4a2e113d25fbe98959d1728d47f292931067a312cd56cb411cbc858d2fc95788d37230723f02a86206f71d3425e9a2eaff54376a358d1a4ef14720946678049bc1192da9c8e69d338833d2d7dee6575a180e55949884eba9a80f9bcfc552bb4701f218d7a848ae3", 0xa7}, {&(0x7f0000000680)="386ea5065463ef9fb79c6a39b62acd64b58041b473288033", 0x18}], 0x2, &(0x7f0000000700)=[{0xf8, 0x115, 0xffffffff, "3570305e440eab3e59a98f78a6dbb1ac75de073488fe7f5cfd14c9924b75cb49bef5d12e4d3e2032c6e4590d4aa00c6e666bd3b10b900deb3f80dadf17b5cf3718df4f4cec59aa20b5e6da8064b9a5e4c7187862d3180b5d481c8ff88f07627c623e89bc6152efc11ff8410637ef8ce13552f258f793ffb2b235fb35fbfe090e54057175118bad21b184a3154be9dda1df07564571db11d531db09f67cc1d231c28b96f32c9b170eab588f6eac2e916146883febdeb9ec65480937b50627763aae572629faba06ea2ac3c9016ab64bd43fbe054c737909346e73dec0c69ca078a67400b4"}, {0x90, 0x118, 0x5, "ac35e025c131528ac053eea1464fe0241f72e04169eb46b8516c814c93e9936fd4bea79a45a49c02b3bdbd46729478ae7174e869c94436af1d54e09f2a1bec9955dab624da7ffaa454543806d230d05d24362c4565217ec1ea6745e483d99f641ee8ceb769be39c53c0ce33eecb5be6cd6e3794b94b671e000f1ae4d9123"}, {0x70, 0x111, 0x0, "5c124575d4c76f75f2660d30f4381653bb69ffb215a30d812e00822e171f6af83b095d80875e971c44b0b66f058ddca493a8430af15e11ea7eec56296bcd2c179425394618c919eb987b0a7b9c481cb3a8cdc8ba1debca574d80b7e4c190581d"}, {0x18, 0x101, 0xfffffeff, "84"}, {0x60, 0xa6, 0x81, "7cd0d3be7f3b8e9aff3af95f35f0b918f023935f3783ad7aba9b9d48e8ce920263ee5427cee4368d4f4431704f88f592528e13352472b80ab94786a4f8de572fb5ef15cdbc6d4a9ea755f09d3a"}, {0xa8, 0x110, 0x7, "b573b6939170194cc281801db4f03cfd0678e0dd99ede78138a85e4822dd3ef345b6208f15e035d6e0c61719c1012455d495491767e4da26617d4d6f88c23f1fde1689c1392d435e34bc13898710ea25c123a1d21253da742808a9b87c5b8f4c0fd52b7135a5aa4f3e8bd4020e9bfacee8a303c4b826f91e5dbff6c86f6eb10aa1b6148ddb083d9bcd5bb1054d125a76ad9637ec35"}], 0x318}}], 0x2, 0x20) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x9) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba00000ca9bdc7b47e7b24105757dc8b3141a780f0f8e00000000976fc6a7fb926ce9177b77cb23c58654c74ec76165e3fda6d50000000000000fe3f15fa397d05147bee0e6817f55984d462b9a7fdb7e0406531b7680381068944f969a4acb511a5f64", 0x64, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000ac0)) (async) getsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x6d, 0xfff, 0x0, 0x401, 0x800008, r4}) (async) sendmmsg(r2, &(0x7f0000000a40)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0x4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="2df98ea5b5b5a5ff6cfbc0b126a079bde38274b51dc636fe9c9db74cfc63e226b9ee6c20e67deca4b3d1c70f07c268e0252aef7a1ca1e6903d7ff8709c7b98ffa70108ee7f7dd436852278465cc153ab7d6863af70178ccb3e919fa5950df863ea02f1030aa1bea82f0453095e764f807a00c79c666d", 0x76}, {&(0x7f0000000380)="cbb65e70f506dc08cc6ac3dc97cb5699bfba9fbe647648ccef9f0173a558a072b00cc0704f152e788ed6e0a23a0314776290e41f88eb73be1afc6b3edfe583c280505372aabc2dd1284dfdef8f09662e9f6e9d0813d69bbf288bdc33d119dad59125ff4a414789d0822805689a11253c9296bf77208ef8bc8c5637e3c449f8bc2374584e494f6eb8b03c7ba029b1245ea3b2cd158b136c7b41ccc0b46fd98c25189c6f5cc46613b1247f2b5aa48a688fd03c7090ee3be7bc2b4e9363b25044c94886e8477534962d6e9f", 0xca}], 0x2, &(0x7f0000000480)=[{0x98, 0x118, 0x1, "9b837c50d532bfd9ab03eb2b4e9aee7921c37071ec088752723a240b8eac89702e0ec87757d1f0860995e8510929213d90ce9f70ab495f0e71629b08a52ed6ec5d8722021123c365d5743ebea5117fedc804ff0895c23bf3eb3d02261fd584a21551594de00f6c65e5adcb5615340640edd6c213842abddef94dcdb659595aa502ffbf4c69"}], 0x98}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0f7820ac7dbca20ddf4b1a57d9dc7213ae3ea2d1ae19c01b0193be766701fae250184c2acb9377a091ff857ae0b7a91ceb5a3635823bb06962c64385bf8368e4a2e113d25fbe98959d1728d47f292931067a312cd56cb411cbc858d2fc95788d37230723f02a86206f71d3425e9a2eaff54376a358d1a4ef14720946678049bc1192da9c8e69d338833d2d7dee6575a180e55949884eba9a80f9bcfc552bb4701f218d7a848ae3", 0xa7}, {&(0x7f0000000680)="386ea5065463ef9fb79c6a39b62acd64b58041b473288033", 0x18}], 0x2, &(0x7f0000000700)=[{0xf8, 0x115, 0xffffffff, "3570305e440eab3e59a98f78a6dbb1ac75de073488fe7f5cfd14c9924b75cb49bef5d12e4d3e2032c6e4590d4aa00c6e666bd3b10b900deb3f80dadf17b5cf3718df4f4cec59aa20b5e6da8064b9a5e4c7187862d3180b5d481c8ff88f07627c623e89bc6152efc11ff8410637ef8ce13552f258f793ffb2b235fb35fbfe090e54057175118bad21b184a3154be9dda1df07564571db11d531db09f67cc1d231c28b96f32c9b170eab588f6eac2e916146883febdeb9ec65480937b50627763aae572629faba06ea2ac3c9016ab64bd43fbe054c737909346e73dec0c69ca078a67400b4"}, {0x90, 0x118, 0x5, "ac35e025c131528ac053eea1464fe0241f72e04169eb46b8516c814c93e9936fd4bea79a45a49c02b3bdbd46729478ae7174e869c94436af1d54e09f2a1bec9955dab624da7ffaa454543806d230d05d24362c4565217ec1ea6745e483d99f641ee8ceb769be39c53c0ce33eecb5be6cd6e3794b94b671e000f1ae4d9123"}, {0x70, 0x111, 0x0, "5c124575d4c76f75f2660d30f4381653bb69ffb215a30d812e00822e171f6af83b095d80875e971c44b0b66f058ddca493a8430af15e11ea7eec56296bcd2c179425394618c919eb987b0a7b9c481cb3a8cdc8ba1debca574d80b7e4c190581d"}, {0x18, 0x101, 0xfffffeff, "84"}, {0x60, 0xa6, 0x81, "7cd0d3be7f3b8e9aff3af95f35f0b918f023935f3783ad7aba9b9d48e8ce920263ee5427cee4368d4f4431704f88f592528e13352472b80ab94786a4f8de572fb5ef15cdbc6d4a9ea755f09d3a"}, {0xa8, 0x110, 0x7, "b573b6939170194cc281801db4f03cfd0678e0dd99ede78138a85e4822dd3ef345b6208f15e035d6e0c61719c1012455d495491767e4da26617d4d6f88c23f1fde1689c1392d435e34bc13898710ea25c123a1d21253da742808a9b87c5b8f4c0fd52b7135a5aa4f3e8bd4020e9bfacee8a303c4b826f91e5dbff6c86f6eb10aa1b6148ddb083d9bcd5bb1054d125a76ad9637ec35"}], 0x318}}], 0x2, 0x20) (async) 08:24:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2429.502825][T29823] loop1: detected capacity change from 0 to 140 08:24:45 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2800) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x13, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xe, [{@multicast1, 0x3}]}, @rr={0x7, 0x1b, 0x88, [@remote, @broadcast, @broadcast, @multicast2, @multicast2, @local]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0xd, 0x1}, {0x5, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) fcntl$setstatus(r1, 0x4, 0x2800) (async) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x1, 0x0, 0x5, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x13, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @noop, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xe, [{@multicast1, 0x3}]}, @rr={0x7, 0x1b, 0x88, [@remote, @broadcast, @broadcast, @multicast2, @multicast2, @local]}]}}}}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0x4}, {0xd, 0x1}, {0x5, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3f, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:45 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r0}, 0x38) dup2(0xffffffffffffffff, r0) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054380)={0x9, [], 0x80, "8b028ce2e72a70"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000780)={{0x0, 0x80000001, 0x3, 0xfffffffffffffff8, 0x1, 0x7fff, 0x1, 0x1, 0x5, 0xc9fb, 0x5, 0x1, 0xa8, 0x3, 0x6}}) r6 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x141200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0xfffff7d8, 0x0, &(0x7f00000001c0)=[r6]}, 0x1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r0}, 0x38) (async) dup2(0xffffffffffffffff, r0) (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054380)={0x9, [], 0x80, "8b028ce2e72a70"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000780)={{0x0, 0x80000001, 0x3, 0xfffffffffffffff8, 0x1, 0x7fff, 0x1, 0x1, 0x5, 0xc9fb, 0x5, 0x1, 0xa8, 0x3, 0x6}}) (async) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x141200) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0xfffff7d8, 0x0, &(0x7f00000001c0)=[r6]}, 0x1) (async) 08:24:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x9) sendto$inet6(r2, &(0x7f0000000140)="1ba00000ca9bdc7b47e7b24105757dc8b3141a780f0f8e00000000976fc6a7fb926ce9177b77cb23c58654c74ec76165e3fda6d50000000000000fe3f15fa397d05147bee0e6817f55984d462b9a7fdb7e0406531b7680381068944f969a4acb511a5f64", 0x64, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000ac0)) getsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x6d, 0xfff, 0x0, 0x401, 0x800008, r4}) sendmmsg(r2, &(0x7f0000000a40)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0x4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="2df98ea5b5b5a5ff6cfbc0b126a079bde38274b51dc636fe9c9db74cfc63e226b9ee6c20e67deca4b3d1c70f07c268e0252aef7a1ca1e6903d7ff8709c7b98ffa70108ee7f7dd436852278465cc153ab7d6863af70178ccb3e919fa5950df863ea02f1030aa1bea82f0453095e764f807a00c79c666d", 0x76}, {&(0x7f0000000380)="cbb65e70f506dc08cc6ac3dc97cb5699bfba9fbe647648ccef9f0173a558a072b00cc0704f152e788ed6e0a23a0314776290e41f88eb73be1afc6b3edfe583c280505372aabc2dd1284dfdef8f09662e9f6e9d0813d69bbf288bdc33d119dad59125ff4a414789d0822805689a11253c9296bf77208ef8bc8c5637e3c449f8bc2374584e494f6eb8b03c7ba029b1245ea3b2cd158b136c7b41ccc0b46fd98c25189c6f5cc46613b1247f2b5aa48a688fd03c7090ee3be7bc2b4e9363b25044c94886e8477534962d6e9f", 0xca}], 0x2, &(0x7f0000000480)=[{0x98, 0x118, 0x1, "9b837c50d532bfd9ab03eb2b4e9aee7921c37071ec088752723a240b8eac89702e0ec87757d1f0860995e8510929213d90ce9f70ab495f0e71629b08a52ed6ec5d8722021123c365d5743ebea5117fedc804ff0895c23bf3eb3d02261fd584a21551594de00f6c65e5adcb5615340640edd6c213842abddef94dcdb659595aa502ffbf4c69"}], 0x98}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0f7820ac7dbca20ddf4b1a57d9dc7213ae3ea2d1ae19c01b0193be766701fae250184c2acb9377a091ff857ae0b7a91ceb5a3635823bb06962c64385bf8368e4a2e113d25fbe98959d1728d47f292931067a312cd56cb411cbc858d2fc95788d37230723f02a86206f71d3425e9a2eaff54376a358d1a4ef14720946678049bc1192da9c8e69d338833d2d7dee6575a180e55949884eba9a80f9bcfc552bb4701f218d7a848ae3", 0xa7}, {&(0x7f0000000680)="386ea5065463ef9fb79c6a39b62acd64b58041b473288033", 0x18}], 0x2, &(0x7f0000000700)=[{0xf8, 0x115, 0xffffffff, "3570305e440eab3e59a98f78a6dbb1ac75de073488fe7f5cfd14c9924b75cb49bef5d12e4d3e2032c6e4590d4aa00c6e666bd3b10b900deb3f80dadf17b5cf3718df4f4cec59aa20b5e6da8064b9a5e4c7187862d3180b5d481c8ff88f07627c623e89bc6152efc11ff8410637ef8ce13552f258f793ffb2b235fb35fbfe090e54057175118bad21b184a3154be9dda1df07564571db11d531db09f67cc1d231c28b96f32c9b170eab588f6eac2e916146883febdeb9ec65480937b50627763aae572629faba06ea2ac3c9016ab64bd43fbe054c737909346e73dec0c69ca078a67400b4"}, {0x90, 0x118, 0x5, "ac35e025c131528ac053eea1464fe0241f72e04169eb46b8516c814c93e9936fd4bea79a45a49c02b3bdbd46729478ae7174e869c94436af1d54e09f2a1bec9955dab624da7ffaa454543806d230d05d24362c4565217ec1ea6745e483d99f641ee8ceb769be39c53c0ce33eecb5be6cd6e3794b94b671e000f1ae4d9123"}, {0x70, 0x111, 0x0, "5c124575d4c76f75f2660d30f4381653bb69ffb215a30d812e00822e171f6af83b095d80875e971c44b0b66f058ddca493a8430af15e11ea7eec56296bcd2c179425394618c919eb987b0a7b9c481cb3a8cdc8ba1debca574d80b7e4c190581d"}, {0x18, 0x101, 0xfffffeff, "84"}, {0x60, 0xa6, 0x81, "7cd0d3be7f3b8e9aff3af95f35f0b918f023935f3783ad7aba9b9d48e8ce920263ee5427cee4368d4f4431704f88f592528e13352472b80ab94786a4f8de572fb5ef15cdbc6d4a9ea755f09d3a"}, {0xa8, 0x110, 0x7, "b573b6939170194cc281801db4f03cfd0678e0dd99ede78138a85e4822dd3ef345b6208f15e035d6e0c61719c1012455d495491767e4da26617d4d6f88c23f1fde1689c1392d435e34bc13898710ea25c123a1d21253da742808a9b87c5b8f4c0fd52b7135a5aa4f3e8bd4020e9bfacee8a303c4b826f91e5dbff6c86f6eb10aa1b6148ddb083d9bcd5bb1054d125a76ad9637ec35"}], 0x318}}], 0x2, 0x20) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x9) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba00000ca9bdc7b47e7b24105757dc8b3141a780f0f8e00000000976fc6a7fb926ce9177b77cb23c58654c74ec76165e3fda6d50000000000000fe3f15fa397d05147bee0e6817f55984d462b9a7fdb7e0406531b7680381068944f969a4acb511a5f64", 0x64, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000ac0)) (async) getsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f0000000040)={@private1}, &(0x7f0000000080)=0x14) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x6d, 0xfff, 0x0, 0x401, 0x800008, r4}) (async) sendmmsg(r2, &(0x7f0000000a40)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0x4}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="2df98ea5b5b5a5ff6cfbc0b126a079bde38274b51dc636fe9c9db74cfc63e226b9ee6c20e67deca4b3d1c70f07c268e0252aef7a1ca1e6903d7ff8709c7b98ffa70108ee7f7dd436852278465cc153ab7d6863af70178ccb3e919fa5950df863ea02f1030aa1bea82f0453095e764f807a00c79c666d", 0x76}, {&(0x7f0000000380)="cbb65e70f506dc08cc6ac3dc97cb5699bfba9fbe647648ccef9f0173a558a072b00cc0704f152e788ed6e0a23a0314776290e41f88eb73be1afc6b3edfe583c280505372aabc2dd1284dfdef8f09662e9f6e9d0813d69bbf288bdc33d119dad59125ff4a414789d0822805689a11253c9296bf77208ef8bc8c5637e3c449f8bc2374584e494f6eb8b03c7ba029b1245ea3b2cd158b136c7b41ccc0b46fd98c25189c6f5cc46613b1247f2b5aa48a688fd03c7090ee3be7bc2b4e9363b25044c94886e8477534962d6e9f", 0xca}], 0x2, &(0x7f0000000480)=[{0x98, 0x118, 0x1, "9b837c50d532bfd9ab03eb2b4e9aee7921c37071ec088752723a240b8eac89702e0ec87757d1f0860995e8510929213d90ce9f70ab495f0e71629b08a52ed6ec5d8722021123c365d5743ebea5117fedc804ff0895c23bf3eb3d02261fd584a21551594de00f6c65e5adcb5615340640edd6c213842abddef94dcdb659595aa502ffbf4c69"}], 0x98}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0f7820ac7dbca20ddf4b1a57d9dc7213ae3ea2d1ae19c01b0193be766701fae250184c2acb9377a091ff857ae0b7a91ceb5a3635823bb06962c64385bf8368e4a2e113d25fbe98959d1728d47f292931067a312cd56cb411cbc858d2fc95788d37230723f02a86206f71d3425e9a2eaff54376a358d1a4ef14720946678049bc1192da9c8e69d338833d2d7dee6575a180e55949884eba9a80f9bcfc552bb4701f218d7a848ae3", 0xa7}, {&(0x7f0000000680)="386ea5065463ef9fb79c6a39b62acd64b58041b473288033", 0x18}], 0x2, &(0x7f0000000700)=[{0xf8, 0x115, 0xffffffff, "3570305e440eab3e59a98f78a6dbb1ac75de073488fe7f5cfd14c9924b75cb49bef5d12e4d3e2032c6e4590d4aa00c6e666bd3b10b900deb3f80dadf17b5cf3718df4f4cec59aa20b5e6da8064b9a5e4c7187862d3180b5d481c8ff88f07627c623e89bc6152efc11ff8410637ef8ce13552f258f793ffb2b235fb35fbfe090e54057175118bad21b184a3154be9dda1df07564571db11d531db09f67cc1d231c28b96f32c9b170eab588f6eac2e916146883febdeb9ec65480937b50627763aae572629faba06ea2ac3c9016ab64bd43fbe054c737909346e73dec0c69ca078a67400b4"}, {0x90, 0x118, 0x5, "ac35e025c131528ac053eea1464fe0241f72e04169eb46b8516c814c93e9936fd4bea79a45a49c02b3bdbd46729478ae7174e869c94436af1d54e09f2a1bec9955dab624da7ffaa454543806d230d05d24362c4565217ec1ea6745e483d99f641ee8ceb769be39c53c0ce33eecb5be6cd6e3794b94b671e000f1ae4d9123"}, {0x70, 0x111, 0x0, "5c124575d4c76f75f2660d30f4381653bb69ffb215a30d812e00822e171f6af83b095d80875e971c44b0b66f058ddca493a8430af15e11ea7eec56296bcd2c179425394618c919eb987b0a7b9c481cb3a8cdc8ba1debca574d80b7e4c190581d"}, {0x18, 0x101, 0xfffffeff, "84"}, {0x60, 0xa6, 0x81, "7cd0d3be7f3b8e9aff3af95f35f0b918f023935f3783ad7aba9b9d48e8ce920263ee5427cee4368d4f4431704f88f592528e13352472b80ab94786a4f8de572fb5ef15cdbc6d4a9ea755f09d3a"}, {0xa8, 0x110, 0x7, "b573b6939170194cc281801db4f03cfd0678e0dd99ede78138a85e4822dd3ef345b6208f15e035d6e0c61719c1012455d495491767e4da26617d4d6f88c23f1fde1689c1392d435e34bc13898710ea25c123a1d21253da742808a9b87c5b8f4c0fd52b7135a5aa4f3e8bd4020e9bfacee8a303c4b826f91e5dbff6c86f6eb10aa1b6148ddb083d9bcd5bb1054d125a76ad9637ec35"}], 0x318}}], 0x2, 0x20) (async) 08:24:45 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2429.586516][T29823] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2429.611515][T29823] EXT4-fs (loop1): get root inode failed [ 2429.617204][T29823] EXT4-fs (loop1): mount failed 08:24:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/119, 0x77, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2429.712235][T29864] loop1: detected capacity change from 0 to 140 [ 2429.735710][T29864] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2429.750483][T29864] EXT4-fs (loop1): get root inode failed [ 2429.756149][T29864] EXT4-fs (loop1): mount failed 08:24:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba000f315001d15890000000f0f8e", 0xff3b, 0x4, 0x0, 0x17557db0f72907fb) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) ftruncate(r6, 0x1) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x11) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, 0xffffffffffffffff, 0x4}, 0x38) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 08:24:46 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 08:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/139, 0x8b, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:46 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:46 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0b442f3a5afecb70d3d4a772b0d9cfb80ae06f930f100d006ca5879a0901ff0ce68dda1f32111694ae2fb1057f87e8d5daf95d3f3aff88942f074911ae41d59d5bb253c9738bd0ae4e2932b48f457a94467c538179f51a226498bd034f0", @ANYRES16=r0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10040804) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1, 0xffffffffffffffff, 0x80000001}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x7, {0x0, r6}, 0xffff, 0x8, 0x0, {0x0, 0x0, r7}}, 0x3) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:46 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="f9fc6e37709c7585ae6bfccbdc61e2fe2afaa1bcc882a311feba1162d9334e3ecf0237a787a458cf73a9333a3718f5cec5bfc415d0e49624fc232e628ac8d001cb4a6cfc599dc930f0ccc6", 0x4b}, {&(0x7f0000000280)="0bf32e29ba9a9a0686fbd98165222e746ae4f65a607f6176ce70813b521f568771d67cfe4cd8aa6c10564d4f0ec3444d94fe0b5202bc3cc6196ac796869a390554c6091792049e37f10867f106d74cb1bdf8b9171c65d01c4923c30dec8f3a01a758232e33e732458f42b3de3e58553a646d5ded301638d98e96423d210cdfc0b8bbf866f9869fd365c9864a75cebfc2bcc4d8310f8721bfd190e51720ae358913bb0f3aa1ca132b87644807ac40ee4a76e3830954a56a27099cad990697b284c6147ee3d1810106c1cb67f9f515cd5222d7edd3d2f517462d0f7f114970c141366af89af4f0a0d4a1adcf58f0652e8808c8577edc7af31679", 0xf9}, {&(0x7f0000000380)="05c069ac39c790507b5c278d7ec603027ffee65e82d60d679a370362d67f2422a1b0d91b3dad75b834f8829420ec0d8564843b2e17cffbec947ab1d72ebc75176b158596ee4e854780910ecdf131dd18e1eafddf71503b228eec24e467a8f05636660a5e1c095c30932d070d67fe21f72f33842fa510888f9f7c19559de801cc12966af2014ff5ce7ea8d7849365f4068f12ffb336b5d6a8", 0x98}], 0x3, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="29455367fd2d953da6b460499398f055708fd8a83e7e2d97d86e38c70ed65f2e69c1507088c29e8b3a3fa48a2ddcbc7d", 0x30}, {&(0x7f0000000500)="797aec2b945b3aa868424fae2817e1e026430205d7c99d629d473654a01154c2f3763d07741d09ed42fa9e9ea5df7f44c0cf133ba018df45e3f832c4ff87ebf99d122d3200cd5b60c85dacd1ae2463baa674d53935857be428590cb0ad5fbb9dda64949541c09c9d30fddd8ebf02645e47fc2ae0a379f6de5697b999f144da2fd8fee2fda38256e409d29f7af5bc29f2abe04029567964da75431363bcb0f5a4d57de839741685bbf605220fd5674ae92aaceb370f9057e3ff", 0xb9}, {&(0x7f00000005c0)="f88aba6ef1ee5afb7ba0c917547a40cc68ac9ee366155b8e51b40126939089dae495f9629d8bc13a81cce0b607a1b6c6233ca3d568ebf15d6cf02ea89c356cc38f44a29ade07caffc09819005c462542b603325c1e420136a1631afd642d1b81beb038a1b2b6291a2585fe2775595670f66b257f4957be44b4b50c5463257ea7f24b4aa64e5c7dac4238cb640bf87615968189f2ba68792727159bae83a04b80a4", 0xa1}, {&(0x7f0000000780)="e7b6f4e682a646bc1b9351a7a59d008f3f8734ed86a6ee24a5f9545b6b3af57ad8dc0fc3e663e3a2171e2809144e6c67ae9f02e57ca268b566e0df07152dbf8cc92a0463cb07537f1823b8cb97b5328ac5c18b6e9ef952b4d2c6010ea34f192217e72103a32516eed24d7653228a99886023cc73dd669ea889a4b5625b55d1824a0f06b2c4b8bf60439dedba6d129d07c99bacb86ab5510f5c182a4566a056f87351edbe70025b21a9eb", 0xaa}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x8, [{@empty, 0x4dda}, {@multicast1, 0x3}, {@loopback, 0x2}, {@multicast1, 0x1}, {@remote, 0x4}, {@local, 0x80000001}, {@broadcast, 0x1f}]}, @generic={0x83, 0x11, "fb09e781dc5591e7b4f3a71f3a026c"}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0xc, "8462eeeabbccaf2009e4"}, {0x6, 0x3, "f3"}, {0x5, 0x7, "301e4397fa"}]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x9, [{@multicast2, 0x40}, {@private=0xa010101, 0x403b68d1}, {@local, 0x26}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "2e3a9682b1af54c110"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x6, [{@multicast2, 0x6}, {@local, 0xcac}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @ssrr={0x89, 0xb, 0x32, [@empty, @empty]}, @rr={0x7, 0x13, 0xc3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x2c, 0x3, [{0x2, 0x8, "6de9835bacb9"}, {0x2, 0xb, "0acffc14f1b24e7ac2"}, {0x1, 0x7, "9cb62a6af7"}, {0x5, 0x3, 'r'}, {0x0, 0x9, "24d12636191805"}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@multicast2, 0x3}, {@broadcast, 0xefb}, {@multicast1, 0x1}, {@broadcast, 0x6}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xfb}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x1}]}, @timestamp={0x44, 0x8, 0x84, 0x0, 0x2, [0x7f]}, @ssrr={0x89, 0x13, 0x1f, [@multicast1, @remote, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x1a0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000a00)="731a21a4420d168dcb4fc7d2a167c7622c2265b5b8a88909afad5e840731e2fd1d", 0x21}, {&(0x7f0000000a40)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x10, 0x0, 0x3}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x78}}], 0x3, 0x48880) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2430.058093][T29903] loop1: detected capacity change from 0 to 140 [ 2430.102429][T29903] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2430.121847][T29903] EXT4-fs (loop1): get root inode failed [ 2430.127529][T29903] EXT4-fs (loop1): mount failed 08:24:46 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/139, 0x8b, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:46 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0b442f3a5afecb70d3d4a772b0d9cfb80ae06f930f100d006ca5879a0901ff0ce68dda1f32111694ae2fb1057f87e8d5daf95d3f3aff88942f074911ae41d59d5bb253c9738bd0ae4e2932b48f457a94467c538179f51a226498bd034f0", @ANYRES16=r0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10040804) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1, 0xffffffffffffffff, 0x80000001}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x7, {0x0, r6}, 0xffff, 0x8, 0x0, {0x0, 0x0, r7}}, 0x3) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0b442f3a5afecb70d3d4a772b0d9cfb80ae06f930f100d006ca5879a0901ff0ce68dda1f32111694ae2fb1057f87e8d5daf95d3f3aff88942f074911ae41d59d5bb253c9738bd0ae4e2932b48f457a94467c538179f51a226498bd034f0", @ANYRES16=r0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10040804) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1, 0xffffffffffffffff, 0x80000001}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x7, {0x0, r6}, 0xffff, 0x8, 0x0, {0x0, 0x0, r7}}, 0x3) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2430.215434][T29927] loop1: detected capacity change from 0 to 140 [ 2430.233392][T29927] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2430.249411][T29927] EXT4-fs (loop1): get root inode failed [ 2430.255088][T29927] EXT4-fs (loop1): mount failed 08:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/139, 0x8b, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2430.318683][T29935] loop1: detected capacity change from 0 to 140 [ 2430.335706][T29935] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2430.358246][T29935] EXT4-fs (loop1): get root inode failed [ 2430.363927][T29935] EXT4-fs (loop1): mount failed 08:24:46 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000c4b000/0x4000)=nil, 0x4000, 0x200000a, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x3f39, &(0x7f0000000180)={0x0, 0xdd78, 0x2, 0x2, 0x10d}, &(0x7f00004f0000/0x2000)=nil, &(0x7f0000ace000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd_index=0x9, 0x2, &(0x7f0000000280)="65bb827f6824499c815714710e05dfac83c32db97240d68a3e44d6d963c1a4529ad7b350160eb2b5e9385fbd729924710b1428cf63711e828626fd4bf5100af7aa970130aa3762ba79ec6b44bf964f1364b1cf4e3d5b7c3e025ada39c492598e6dda32ffaf836f7f40543a6744d782637e985b8dee01cab2e6c642f67161bdb2290abb721b04f9ea54e613531a3a1a0682f8ff615e973ef9eae81c3ba378f92589a8c95cae9bf85137849d58f0ed9399e612f55ef261ca1fd9cf6232e972d3aeca04f7965c88bd7d54a221135d1fc8e25c19e930f02522a7e6908b5f9058e04d35df9604d287d3c085e0ab308ef6e4e1bb46db5718c61de3d0", 0xf9, 0x2, 0x1}, 0x7f) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2430.451425][T29959] loop1: detected capacity change from 0 to 140 [ 2430.484866][T29959] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2430.497270][T29959] EXT4-fs (loop1): get root inode failed [ 2430.502962][T29959] EXT4-fs (loop1): mount failed 08:24:46 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba000f315001d15890000000f0f8e", 0xff3b, 0x4, 0x0, 0x17557db0f72907fb) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) (async) ftruncate(r6, 0x1) (async) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x11) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 08:24:46 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 08:24:46 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0b442f3a5afecb70d3d4a772b0d9cfb80ae06f930f100d006ca5879a0901ff0ce68dda1f32111694ae2fb1057f87e8d5daf95d3f3aff88942f074911ae41d59d5bb253c9738bd0ae4e2932b48f457a94467c538179f51a226498bd034f0", @ANYRES16=r0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x10040804) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1, 0xffffffffffffffff, 0x80000001}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r7}, 0x38) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x7, {0x0, r6}, 0xffff, 0x8, 0x0, {0x0, 0x0, r7}}, 0x3) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:46 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="f9fc6e37709c7585ae6bfccbdc61e2fe2afaa1bcc882a311feba1162d9334e3ecf0237a787a458cf73a9333a3718f5cec5bfc415d0e49624fc232e628ac8d001cb4a6cfc599dc930f0ccc6", 0x4b}, {&(0x7f0000000280)="0bf32e29ba9a9a0686fbd98165222e746ae4f65a607f6176ce70813b521f568771d67cfe4cd8aa6c10564d4f0ec3444d94fe0b5202bc3cc6196ac796869a390554c6091792049e37f10867f106d74cb1bdf8b9171c65d01c4923c30dec8f3a01a758232e33e732458f42b3de3e58553a646d5ded301638d98e96423d210cdfc0b8bbf866f9869fd365c9864a75cebfc2bcc4d8310f8721bfd190e51720ae358913bb0f3aa1ca132b87644807ac40ee4a76e3830954a56a27099cad990697b284c6147ee3d1810106c1cb67f9f515cd5222d7edd3d2f517462d0f7f114970c141366af89af4f0a0d4a1adcf58f0652e8808c8577edc7af31679", 0xf9}, {&(0x7f0000000380)="05c069ac39c790507b5c278d7ec603027ffee65e82d60d679a370362d67f2422a1b0d91b3dad75b834f8829420ec0d8564843b2e17cffbec947ab1d72ebc75176b158596ee4e854780910ecdf131dd18e1eafddf71503b228eec24e467a8f05636660a5e1c095c30932d070d67fe21f72f33842fa510888f9f7c19559de801cc12966af2014ff5ce7ea8d7849365f4068f12ffb336b5d6a8", 0x98}], 0x3, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="29455367fd2d953da6b460499398f055708fd8a83e7e2d97d86e38c70ed65f2e69c1507088c29e8b3a3fa48a2ddcbc7d", 0x30}, {&(0x7f0000000500)="797aec2b945b3aa868424fae2817e1e026430205d7c99d629d473654a01154c2f3763d07741d09ed42fa9e9ea5df7f44c0cf133ba018df45e3f832c4ff87ebf99d122d3200cd5b60c85dacd1ae2463baa674d53935857be428590cb0ad5fbb9dda64949541c09c9d30fddd8ebf02645e47fc2ae0a379f6de5697b999f144da2fd8fee2fda38256e409d29f7af5bc29f2abe04029567964da75431363bcb0f5a4d57de839741685bbf605220fd5674ae92aaceb370f9057e3ff", 0xb9}, {&(0x7f00000005c0)="f88aba6ef1ee5afb7ba0c917547a40cc68ac9ee366155b8e51b40126939089dae495f9629d8bc13a81cce0b607a1b6c6233ca3d568ebf15d6cf02ea89c356cc38f44a29ade07caffc09819005c462542b603325c1e420136a1631afd642d1b81beb038a1b2b6291a2585fe2775595670f66b257f4957be44b4b50c5463257ea7f24b4aa64e5c7dac4238cb640bf87615968189f2ba68792727159bae83a04b80a4", 0xa1}, {&(0x7f0000000780)="e7b6f4e682a646bc1b9351a7a59d008f3f8734ed86a6ee24a5f9545b6b3af57ad8dc0fc3e663e3a2171e2809144e6c67ae9f02e57ca268b566e0df07152dbf8cc92a0463cb07537f1823b8cb97b5328ac5c18b6e9ef952b4d2c6010ea34f192217e72103a32516eed24d7653228a99886023cc73dd669ea889a4b5625b55d1824a0f06b2c4b8bf60439dedba6d129d07c99bacb86ab5510f5c182a4566a056f87351edbe70025b21a9eb", 0xaa}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x8, [{@empty, 0x4dda}, {@multicast1, 0x3}, {@loopback, 0x2}, {@multicast1, 0x1}, {@remote, 0x4}, {@local, 0x80000001}, {@broadcast, 0x1f}]}, @generic={0x83, 0x11, "fb09e781dc5591e7b4f3a71f3a026c"}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0xc, "8462eeeabbccaf2009e4"}, {0x6, 0x3, "f3"}, {0x5, 0x7, "301e4397fa"}]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x9, [{@multicast2, 0x40}, {@private=0xa010101, 0x403b68d1}, {@local, 0x26}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "2e3a9682b1af54c110"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x6, [{@multicast2, 0x6}, {@local, 0xcac}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @ssrr={0x89, 0xb, 0x32, [@empty, @empty]}, @rr={0x7, 0x13, 0xc3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x2c, 0x3, [{0x2, 0x8, "6de9835bacb9"}, {0x2, 0xb, "0acffc14f1b24e7ac2"}, {0x1, 0x7, "9cb62a6af7"}, {0x5, 0x3, 'r'}, {0x0, 0x9, "24d12636191805"}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@multicast2, 0x3}, {@broadcast, 0xefb}, {@multicast1, 0x1}, {@broadcast, 0x6}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xfb}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x1}]}, @timestamp={0x44, 0x8, 0x84, 0x0, 0x2, [0x7f]}, @ssrr={0x89, 0x13, 0x1f, [@multicast1, @remote, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x1a0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000a00)="731a21a4420d168dcb4fc7d2a167c7622c2265b5b8a88909afad5e840731e2fd1d", 0x21}, {&(0x7f0000000a40)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x10, 0x0, 0x3}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x78}}], 0x3, 0x48880) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:46 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000c4b000/0x4000)=nil, 0x4000, 0x200000a, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x3f39, &(0x7f0000000180)={0x0, 0xdd78, 0x2, 0x2, 0x10d}, &(0x7f00004f0000/0x2000)=nil, &(0x7f0000ace000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd_index=0x9, 0x2, &(0x7f0000000280)="65bb827f6824499c815714710e05dfac83c32db97240d68a3e44d6d963c1a4529ad7b350160eb2b5e9385fbd729924710b1428cf63711e828626fd4bf5100af7aa970130aa3762ba79ec6b44bf964f1364b1cf4e3d5b7c3e025ada39c492598e6dda32ffaf836f7f40543a6744d782637e985b8dee01cab2e6c642f67161bdb2290abb721b04f9ea54e613531a3a1a0682f8ff615e973ef9eae81c3ba378f92589a8c95cae9bf85137849d58f0ed9399e612f55ef261ca1fd9cf6232e972d3aeca04f7965c88bd7d54a221135d1fc8e25c19e930f02522a7e6908b5f9058e04d35df9604d287d3c085e0ab308ef6e4e1bb46db5718c61de3d0", 0xf9, 0x2, 0x1}, 0x7f) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000c4b000/0x4000)=nil, 0x4000, 0x200000a, 0x1010, r0, 0x8000000) (async) syz_io_uring_setup(0x3f39, &(0x7f0000000180)={0x0, 0xdd78, 0x2, 0x2, 0x10d}, &(0x7f00004f0000/0x2000)=nil, &(0x7f0000ace000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd_index=0x9, 0x2, &(0x7f0000000280)="65bb827f6824499c815714710e05dfac83c32db97240d68a3e44d6d963c1a4529ad7b350160eb2b5e9385fbd729924710b1428cf63711e828626fd4bf5100af7aa970130aa3762ba79ec6b44bf964f1364b1cf4e3d5b7c3e025ada39c492598e6dda32ffaf836f7f40543a6744d782637e985b8dee01cab2e6c642f67161bdb2290abb721b04f9ea54e613531a3a1a0682f8ff615e973ef9eae81c3ba378f92589a8c95cae9bf85137849d58f0ed9399e612f55ef261ca1fd9cf6232e972d3aeca04f7965c88bd7d54a221135d1fc8e25c19e930f02522a7e6908b5f9058e04d35df9604d287d3c085e0ab308ef6e4e1bb46db5718c61de3d0", 0xf9, 0x2, 0x1}, 0x7f) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:46 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba000f315001d15890000000f0f8e", 0xff3b, 0x4, 0x0, 0x17557db0f72907fb) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r6}, 0x38) ftruncate(r6, 0x1) (async) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x1, 0x11) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, 0xffffffffffffffff, 0x4}, 0x38) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 08:24:46 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="eb921a7952e83ceff4e6b1aa791ffd09944defa34f0465b21775310be24785cb1ef691e108870f6ba90507b8bb00b61cbcc8823e733f64199f8af424641ebcaa5726467313ff6826988b7ba7727fc80ee1e2d8fb9c6179e11f6551af4067693926bf480d3fa76006dc8625de6541e6e96b8db5e3d1ae6a225fd7e670d7428a222755d58bc4c6314c8ac0a7445a321251a655fe49a955ffcdf7bac46d2a2ed3b01156392e98e67239eec48a1bb47690e12db55166ded4dd30861a", 0xba}, {&(0x7f0000000340)="a93bf3229959d58752cbc23b9fd6da31996fcb2175d99093bfeebd4c7e238546307acbbb8a2d010439a0e99f3d46196b0e6a1490e0e5a6a8100b9edfa4bd2ed45881fb6e839cf34ee290410af38adf77d316600a746d8dca038e70fd629fe9eb0492bdf6242672983c4329f73f1be1f89954c21595229f7e0408be71a336f9b98b", 0x81}, {&(0x7f0000000180)="3568125d640dccf6417e1636ce699ea5677d3ef1a15c18bb6c7f299ffcc2b98372fcbc18f63634075bfd896d4a4c4bcd51083d64e8ecc8cb149dc430076730743bc2a68bdba764efc0dd5d5160b27789245702e588411cc3cc95b3ebebd9c71063814f09f097c56862277b15aa003d7672ee71b5f3", 0x75}, {&(0x7f0000000400)="b3ab775b9bab6cfea008641846d9957333cce4d92d9f85cc1a20c5dc54e4930f96cec40015312b96dd747e1636eb89a2859dd9d69c48cb00062c181a9394e4d0cbce3a1a1d14cb0c13cf0edc61956dd79cf494824fc3c1a04728330f8ad12f263dbbbaa579c5f7fff334b29099f7a669e3b641b05673693c42e14e52f5b35e5d9edd232231eb597c397eb9b65381262ee402e127651bfdb415d164ac5b163bdbe4040f38a6895531bfe1d0272d9051fe6d16f9499c05570673164cc17ea84eaa3967dfd0f2166a425f3311c5745495cdd3cd58c5e62323f8f77935e5f0f447eee3e5417c0d0a099ecf976a014eaedaa83f730833b4fabb", 0xf7}, {&(0x7f0000000500)="1eb082d2b62bb91267e27ee426fdbe802d1916fa17af1c9210b8428516f9b383d9138268396c5aa3a326634fc6daa2a6e48c0ea06f53b6da28f71367d78195261dd31603e34366f3c707aa4c59223a35c4ff8dcd82a95be682b0abfe42805d", 0x5f}], 0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:46 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="f9fc6e37709c7585ae6bfccbdc61e2fe2afaa1bcc882a311feba1162d9334e3ecf0237a787a458cf73a9333a3718f5cec5bfc415d0e49624fc232e628ac8d001cb4a6cfc599dc930f0ccc6", 0x4b}, {&(0x7f0000000280)="0bf32e29ba9a9a0686fbd98165222e746ae4f65a607f6176ce70813b521f568771d67cfe4cd8aa6c10564d4f0ec3444d94fe0b5202bc3cc6196ac796869a390554c6091792049e37f10867f106d74cb1bdf8b9171c65d01c4923c30dec8f3a01a758232e33e732458f42b3de3e58553a646d5ded301638d98e96423d210cdfc0b8bbf866f9869fd365c9864a75cebfc2bcc4d8310f8721bfd190e51720ae358913bb0f3aa1ca132b87644807ac40ee4a76e3830954a56a27099cad990697b284c6147ee3d1810106c1cb67f9f515cd5222d7edd3d2f517462d0f7f114970c141366af89af4f0a0d4a1adcf58f0652e8808c8577edc7af31679", 0xf9}, {&(0x7f0000000380)="05c069ac39c790507b5c278d7ec603027ffee65e82d60d679a370362d67f2422a1b0d91b3dad75b834f8829420ec0d8564843b2e17cffbec947ab1d72ebc75176b158596ee4e854780910ecdf131dd18e1eafddf71503b228eec24e467a8f05636660a5e1c095c30932d070d67fe21f72f33842fa510888f9f7c19559de801cc12966af2014ff5ce7ea8d7849365f4068f12ffb336b5d6a8", 0x98}], 0x3, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="29455367fd2d953da6b460499398f055708fd8a83e7e2d97d86e38c70ed65f2e69c1507088c29e8b3a3fa48a2ddcbc7d", 0x30}, {&(0x7f0000000500)="797aec2b945b3aa868424fae2817e1e026430205d7c99d629d473654a01154c2f3763d07741d09ed42fa9e9ea5df7f44c0cf133ba018df45e3f832c4ff87ebf99d122d3200cd5b60c85dacd1ae2463baa674d53935857be428590cb0ad5fbb9dda64949541c09c9d30fddd8ebf02645e47fc2ae0a379f6de5697b999f144da2fd8fee2fda38256e409d29f7af5bc29f2abe04029567964da75431363bcb0f5a4d57de839741685bbf605220fd5674ae92aaceb370f9057e3ff", 0xb9}, {&(0x7f00000005c0)="f88aba6ef1ee5afb7ba0c917547a40cc68ac9ee366155b8e51b40126939089dae495f9629d8bc13a81cce0b607a1b6c6233ca3d568ebf15d6cf02ea89c356cc38f44a29ade07caffc09819005c462542b603325c1e420136a1631afd642d1b81beb038a1b2b6291a2585fe2775595670f66b257f4957be44b4b50c5463257ea7f24b4aa64e5c7dac4238cb640bf87615968189f2ba68792727159bae83a04b80a4", 0xa1}, {&(0x7f0000000780)="e7b6f4e682a646bc1b9351a7a59d008f3f8734ed86a6ee24a5f9545b6b3af57ad8dc0fc3e663e3a2171e2809144e6c67ae9f02e57ca268b566e0df07152dbf8cc92a0463cb07537f1823b8cb97b5328ac5c18b6e9ef952b4d2c6010ea34f192217e72103a32516eed24d7653228a99886023cc73dd669ea889a4b5625b55d1824a0f06b2c4b8bf60439dedba6d129d07c99bacb86ab5510f5c182a4566a056f87351edbe70025b21a9eb", 0xaa}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x8, [{@empty, 0x4dda}, {@multicast1, 0x3}, {@loopback, 0x2}, {@multicast1, 0x1}, {@remote, 0x4}, {@local, 0x80000001}, {@broadcast, 0x1f}]}, @generic={0x83, 0x11, "fb09e781dc5591e7b4f3a71f3a026c"}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0xc, "8462eeeabbccaf2009e4"}, {0x6, 0x3, "f3"}, {0x5, 0x7, "301e4397fa"}]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x9, [{@multicast2, 0x40}, {@private=0xa010101, 0x403b68d1}, {@local, 0x26}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "2e3a9682b1af54c110"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x6, [{@multicast2, 0x6}, {@local, 0xcac}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @ssrr={0x89, 0xb, 0x32, [@empty, @empty]}, @rr={0x7, 0x13, 0xc3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x2c, 0x3, [{0x2, 0x8, "6de9835bacb9"}, {0x2, 0xb, "0acffc14f1b24e7ac2"}, {0x1, 0x7, "9cb62a6af7"}, {0x5, 0x3, 'r'}, {0x0, 0x9, "24d12636191805"}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@multicast2, 0x3}, {@broadcast, 0xefb}, {@multicast1, 0x1}, {@broadcast, 0x6}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xfb}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x1}]}, @timestamp={0x44, 0x8, 0x84, 0x0, 0x2, [0x7f]}, @ssrr={0x89, 0x13, 0x1f, [@multicast1, @remote, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x1a0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000a00)="731a21a4420d168dcb4fc7d2a167c7622c2265b5b8a88909afad5e840731e2fd1d", 0x21}, {&(0x7f0000000a40)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x10, 0x0, 0x3}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x78}}], 0x3, 0x48880) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="f9fc6e37709c7585ae6bfccbdc61e2fe2afaa1bcc882a311feba1162d9334e3ecf0237a787a458cf73a9333a3718f5cec5bfc415d0e49624fc232e628ac8d001cb4a6cfc599dc930f0ccc6", 0x4b}, {&(0x7f0000000280)="0bf32e29ba9a9a0686fbd98165222e746ae4f65a607f6176ce70813b521f568771d67cfe4cd8aa6c10564d4f0ec3444d94fe0b5202bc3cc6196ac796869a390554c6091792049e37f10867f106d74cb1bdf8b9171c65d01c4923c30dec8f3a01a758232e33e732458f42b3de3e58553a646d5ded301638d98e96423d210cdfc0b8bbf866f9869fd365c9864a75cebfc2bcc4d8310f8721bfd190e51720ae358913bb0f3aa1ca132b87644807ac40ee4a76e3830954a56a27099cad990697b284c6147ee3d1810106c1cb67f9f515cd5222d7edd3d2f517462d0f7f114970c141366af89af4f0a0d4a1adcf58f0652e8808c8577edc7af31679", 0xf9}, {&(0x7f0000000380)="05c069ac39c790507b5c278d7ec603027ffee65e82d60d679a370362d67f2422a1b0d91b3dad75b834f8829420ec0d8564843b2e17cffbec947ab1d72ebc75176b158596ee4e854780910ecdf131dd18e1eafddf71503b228eec24e467a8f05636660a5e1c095c30932d070d67fe21f72f33842fa510888f9f7c19559de801cc12966af2014ff5ce7ea8d7849365f4068f12ffb336b5d6a8", 0x98}], 0x3, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="29455367fd2d953da6b460499398f055708fd8a83e7e2d97d86e38c70ed65f2e69c1507088c29e8b3a3fa48a2ddcbc7d", 0x30}, {&(0x7f0000000500)="797aec2b945b3aa868424fae2817e1e026430205d7c99d629d473654a01154c2f3763d07741d09ed42fa9e9ea5df7f44c0cf133ba018df45e3f832c4ff87ebf99d122d3200cd5b60c85dacd1ae2463baa674d53935857be428590cb0ad5fbb9dda64949541c09c9d30fddd8ebf02645e47fc2ae0a379f6de5697b999f144da2fd8fee2fda38256e409d29f7af5bc29f2abe04029567964da75431363bcb0f5a4d57de839741685bbf605220fd5674ae92aaceb370f9057e3ff", 0xb9}, {&(0x7f00000005c0)="f88aba6ef1ee5afb7ba0c917547a40cc68ac9ee366155b8e51b40126939089dae495f9629d8bc13a81cce0b607a1b6c6233ca3d568ebf15d6cf02ea89c356cc38f44a29ade07caffc09819005c462542b603325c1e420136a1631afd642d1b81beb038a1b2b6291a2585fe2775595670f66b257f4957be44b4b50c5463257ea7f24b4aa64e5c7dac4238cb640bf87615968189f2ba68792727159bae83a04b80a4", 0xa1}, {&(0x7f0000000780)="e7b6f4e682a646bc1b9351a7a59d008f3f8734ed86a6ee24a5f9545b6b3af57ad8dc0fc3e663e3a2171e2809144e6c67ae9f02e57ca268b566e0df07152dbf8cc92a0463cb07537f1823b8cb97b5328ac5c18b6e9ef952b4d2c6010ea34f192217e72103a32516eed24d7653228a99886023cc73dd669ea889a4b5625b55d1824a0f06b2c4b8bf60439dedba6d129d07c99bacb86ab5510f5c182a4566a056f87351edbe70025b21a9eb", 0xaa}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x8, [{@empty, 0x4dda}, {@multicast1, 0x3}, {@loopback, 0x2}, {@multicast1, 0x1}, {@remote, 0x4}, {@local, 0x80000001}, {@broadcast, 0x1f}]}, @generic={0x83, 0x11, "fb09e781dc5591e7b4f3a71f3a026c"}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0xc, "8462eeeabbccaf2009e4"}, {0x6, 0x3, "f3"}, {0x5, 0x7, "301e4397fa"}]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x9, [{@multicast2, 0x40}, {@private=0xa010101, 0x403b68d1}, {@local, 0x26}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "2e3a9682b1af54c110"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x6, [{@multicast2, 0x6}, {@local, 0xcac}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @ssrr={0x89, 0xb, 0x32, [@empty, @empty]}, @rr={0x7, 0x13, 0xc3, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}]}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x2c, 0x3, [{0x2, 0x8, "6de9835bacb9"}, {0x2, 0xb, "0acffc14f1b24e7ac2"}, {0x1, 0x7, "9cb62a6af7"}, {0x5, 0x3, 'r'}, {0x0, 0x9, "24d12636191805"}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@multicast2, 0x3}, {@broadcast, 0xefb}, {@multicast1, 0x1}, {@broadcast, 0x6}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xfb}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x1}]}, @timestamp={0x44, 0x8, 0x84, 0x0, 0x2, [0x7f]}, @ssrr={0x89, 0x13, 0x1f, [@multicast1, @remote, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x1a0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000a00)="731a21a4420d168dcb4fc7d2a167c7622c2265b5b8a88909afad5e840731e2fd1d", 0x21}, {&(0x7f0000000a40)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x10, 0x0, 0x3}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x78}}], 0x3, 0x48880) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2430.719207][T29985] loop1: detected capacity change from 0 to 140 08:24:46 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xa9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r4, &(0x7f0000001a40)={&(0x7f0000000580)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000800)=""/30, 0x1e}, {&(0x7f0000000840)=""/102, 0x66}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/195, 0xc3}, 0x40) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7fffffffffffffff, 0x30400) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff7, @loopback, 0x8}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90084}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="fac47889", @ANYRES16=r7, @ANYBLOB="200026bd7000ffdbdf257b0000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48005) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000008000000000000000b2f1509ba0000000000000000000000000000000000bef300000000000000"], 0x58) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)=r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c80)={0xffffffffffffffff, &(0x7f0000001cc0)="48604981f54db1f2c9d0ea253bd450f149724ba8ffffbb4e497b66571844e93b576651783558e0f4e2e99346a6fda0d225085ce51ccc45e7d52eec5b9ba1c15bed1302809e84bb497e53897aee96054e684f6413eaee48f03f438a3ba5776621287665249a8eaba7c4495ce23bd620d98280ecb0fe5ea0c2deabbe119986edcc7253688ceb454c608ad7d4a8c93cd80dc4b9b65da3d8b05f6c983f6da331fdfdea14ae8c3a918ed4ac265f671078ac246429478ea4bd22ced1307da7ee1f232d2c47ea5316a937f306a57ff1f6305f450397138d9a6c543aea2e7dad488da14530312985865ab49e2122be", &(0x7f0000001c00)=@tcp6, 0x4}, 0x20) [ 2430.778185][T29985] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2430.830891][T29985] EXT4-fs (loop1): get root inode failed [ 2430.836641][T29985] EXT4-fs (loop1): mount failed 08:24:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2430.907946][ T24] audit: type=1400 audit(1659515087.012:180395): avc: denied { read } for pid=30012 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2430.948914][T30016] loop1: detected capacity change from 0 to 140 [ 2430.950768][T29279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2430.964376][T29279] Buffer I/O error on dev loop1, logical block 0, async page read [ 2431.022943][T30016] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2431.086809][T30016] EXT4-fs (loop1): get root inode failed [ 2431.092511][T30016] EXT4-fs (loop1): mount failed 08:24:47 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000c4b000/0x4000)=nil, 0x4000, 0x200000a, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x3f39, &(0x7f0000000180)={0x0, 0xdd78, 0x2, 0x2, 0x10d}, &(0x7f00004f0000/0x2000)=nil, &(0x7f0000ace000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd_index=0x9, 0x2, &(0x7f0000000280)="65bb827f6824499c815714710e05dfac83c32db97240d68a3e44d6d963c1a4529ad7b350160eb2b5e9385fbd729924710b1428cf63711e828626fd4bf5100af7aa970130aa3762ba79ec6b44bf964f1364b1cf4e3d5b7c3e025ada39c492598e6dda32ffaf836f7f40543a6744d782637e985b8dee01cab2e6c642f67161bdb2290abb721b04f9ea54e613531a3a1a0682f8ff615e973ef9eae81c3ba378f92589a8c95cae9bf85137849d58f0ed9399e612f55ef261ca1fd9cf6232e972d3aeca04f7965c88bd7d54a221135d1fc8e25c19e930f02522a7e6908b5f9058e04d35df9604d287d3c085e0ab308ef6e4e1bb46db5718c61de3d0", 0xf9, 0x2, 0x1}, 0x7f) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:47 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="eb921a7952e83ceff4e6b1aa791ffd09944defa34f0465b21775310be24785cb1ef691e108870f6ba90507b8bb00b61cbcc8823e733f64199f8af424641ebcaa5726467313ff6826988b7ba7727fc80ee1e2d8fb9c6179e11f6551af4067693926bf480d3fa76006dc8625de6541e6e96b8db5e3d1ae6a225fd7e670d7428a222755d58bc4c6314c8ac0a7445a321251a655fe49a955ffcdf7bac46d2a2ed3b01156392e98e67239eec48a1bb47690e12db55166ded4dd30861a", 0xba}, {&(0x7f0000000340)="a93bf3229959d58752cbc23b9fd6da31996fcb2175d99093bfeebd4c7e238546307acbbb8a2d010439a0e99f3d46196b0e6a1490e0e5a6a8100b9edfa4bd2ed45881fb6e839cf34ee290410af38adf77d316600a746d8dca038e70fd629fe9eb0492bdf6242672983c4329f73f1be1f89954c21595229f7e0408be71a336f9b98b", 0x81}, {&(0x7f0000000180)="3568125d640dccf6417e1636ce699ea5677d3ef1a15c18bb6c7f299ffcc2b98372fcbc18f63634075bfd896d4a4c4bcd51083d64e8ecc8cb149dc430076730743bc2a68bdba764efc0dd5d5160b27789245702e588411cc3cc95b3ebebd9c71063814f09f097c56862277b15aa003d7672ee71b5f3", 0x75}, {&(0x7f0000000400)="b3ab775b9bab6cfea008641846d9957333cce4d92d9f85cc1a20c5dc54e4930f96cec40015312b96dd747e1636eb89a2859dd9d69c48cb00062c181a9394e4d0cbce3a1a1d14cb0c13cf0edc61956dd79cf494824fc3c1a04728330f8ad12f263dbbbaa579c5f7fff334b29099f7a669e3b641b05673693c42e14e52f5b35e5d9edd232231eb597c397eb9b65381262ee402e127651bfdb415d164ac5b163bdbe4040f38a6895531bfe1d0272d9051fe6d16f9499c05570673164cc17ea84eaa3967dfd0f2166a425f3311c5745495cdd3cd58c5e62323f8f77935e5f0f447eee3e5417c0d0a099ecf976a014eaedaa83f730833b4fabb", 0xf7}, {&(0x7f0000000500)="1eb082d2b62bb91267e27ee426fdbe802d1916fa17af1c9210b8428516f9b383d9138268396c5aa3a326634fc6daa2a6e48c0ea06f53b6da28f71367d78195261dd31603e34366f3c707aa4c59223a35c4ff8dcd82a95be682b0abfe42805d", 0x5f}], 0x5) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 08:24:47 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 08:24:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/154, 0x9a, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:47 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000280)="eb921a7952e83ceff4e6b1aa791ffd09944defa34f0465b21775310be24785cb1ef691e108870f6ba90507b8bb00b61cbcc8823e733f64199f8af424641ebcaa5726467313ff6826988b7ba7727fc80ee1e2d8fb9c6179e11f6551af4067693926bf480d3fa76006dc8625de6541e6e96b8db5e3d1ae6a225fd7e670d7428a222755d58bc4c6314c8ac0a7445a321251a655fe49a955ffcdf7bac46d2a2ed3b01156392e98e67239eec48a1bb47690e12db55166ded4dd30861a", 0xba}, {&(0x7f0000000340)="a93bf3229959d58752cbc23b9fd6da31996fcb2175d99093bfeebd4c7e238546307acbbb8a2d010439a0e99f3d46196b0e6a1490e0e5a6a8100b9edfa4bd2ed45881fb6e839cf34ee290410af38adf77d316600a746d8dca038e70fd629fe9eb0492bdf6242672983c4329f73f1be1f89954c21595229f7e0408be71a336f9b98b", 0x81}, {&(0x7f0000000180)="3568125d640dccf6417e1636ce699ea5677d3ef1a15c18bb6c7f299ffcc2b98372fcbc18f63634075bfd896d4a4c4bcd51083d64e8ecc8cb149dc430076730743bc2a68bdba764efc0dd5d5160b27789245702e588411cc3cc95b3ebebd9c71063814f09f097c56862277b15aa003d7672ee71b5f3", 0x75}, {&(0x7f0000000400)="b3ab775b9bab6cfea008641846d9957333cce4d92d9f85cc1a20c5dc54e4930f96cec40015312b96dd747e1636eb89a2859dd9d69c48cb00062c181a9394e4d0cbce3a1a1d14cb0c13cf0edc61956dd79cf494824fc3c1a04728330f8ad12f263dbbbaa579c5f7fff334b29099f7a669e3b641b05673693c42e14e52f5b35e5d9edd232231eb597c397eb9b65381262ee402e127651bfdb415d164ac5b163bdbe4040f38a6895531bfe1d0272d9051fe6d16f9499c05570673164cc17ea84eaa3967dfd0f2166a425f3311c5745495cdd3cd58c5e62323f8f77935e5f0f447eee3e5417c0d0a099ecf976a014eaedaa83f730833b4fabb", 0xf7}, {&(0x7f0000000500)="1eb082d2b62bb91267e27ee426fdbe802d1916fa17af1c9210b8428516f9b383d9138268396c5aa3a326634fc6daa2a6e48c0ea06f53b6da28f71367d78195261dd31603e34366f3c707aa4c59223a35c4ff8dcd82a95be682b0abfe42805d", 0x5f}], 0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:47 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x176}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_setup(0xc7a, &(0x7f0000000180)={0x0, 0x48c8, 0x1, 0x2, 0x2ca}, &(0x7f00008d5000/0x1000)=nil, &(0x7f0000aa9000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)=0x0) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x80, 0x3, 0x7, 0x0, 0x27fe40, 0x4, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000003c0), 0xe}, 0x813, 0x8, 0x2d, 0x2, 0x3, 0xa5de, 0x20, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x5) 08:24:47 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000c9b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x1, &(0x7f0000000300)=""/241, 0xf1}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f00007a0000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xb92a5f6cf7384008, &(0x7f0000000400)=""/121, 0x79}, &(0x7f00000004c0)=0x40) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2431.456747][T30029] loop1: detected capacity change from 0 to 140 [ 2431.495330][T30029] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:47 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e2c000/0x1000)=nil, 0x1000, 0x3000000, 0x12, r1, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000587000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r1, 0x10000000) r6 = syz_open_pts(r1, 0x4080) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0xaf7, {0x0, r6}, 0x7f, 0xd, 0x1, {0x0, r10, r0}}, 0x16eb) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xd89, 0x3, &(0x7f00000003c0)="e933cc604b420587b5e84c8475962eac77977e218eb0752d583d5e189083b895e455d81b26e5b6599d32d4a1ddd997e794c3", 0x7, 0x0, 0x1}, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "df26cac2f261cbeb12d639a961898150"}, 0x11, 0x2) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2431.523070][T30029] EXT4-fs (loop1): get root inode failed [ 2431.528859][T30029] EXT4-fs (loop1): mount failed 08:24:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/154, 0x9a, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2431.617351][T30046] loop1: detected capacity change from 0 to 140 [ 2431.635800][T30046] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2431.657216][T30046] EXT4-fs (loop1): get root inode failed 08:24:47 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000c9b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x1, &(0x7f0000000300)=""/241, 0xf1}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f00007a0000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xb92a5f6cf7384008, &(0x7f0000000400)=""/121, 0x79}, &(0x7f00000004c0)=0x40) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2431.662936][T30046] EXT4-fs (loop1): mount failed 08:24:47 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xa9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r4, &(0x7f0000001a40)={&(0x7f0000000580)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000800)=""/30, 0x1e}, {&(0x7f0000000840)=""/102, 0x66}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/195, 0xc3}, 0x40) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7fffffffffffffff, 0x30400) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff7, @loopback, 0x8}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90084}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="fac47889", @ANYRES16=r7, @ANYBLOB="200026bd7000ffdbdf257b0000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48005) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000008000000000000000b2f1509ba0000000000000000000000000000000000bef300000000000000"], 0x58) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)=r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c80)={0xffffffffffffffff, &(0x7f0000001cc0)="48604981f54db1f2c9d0ea253bd450f149724ba8ffffbb4e497b66571844e93b576651783558e0f4e2e99346a6fda0d225085ce51ccc45e7d52eec5b9ba1c15bed1302809e84bb497e53897aee96054e684f6413eaee48f03f438a3ba5776621287665249a8eaba7c4495ce23bd620d98280ecb0fe5ea0c2deabbe119986edcc7253688ceb454c608ad7d4a8c93cd80dc4b9b65da3d8b05f6c983f6da331fdfdea14ae8c3a918ed4ac265f671078ac246429478ea4bd22ced1307da7ee1f232d2c47ea5316a937f306a57ff1f6305f450397138d9a6c543aea2e7dad488da14530312985865ab49e2122be", &(0x7f0000001c00)=@tcp6, 0x4}, 0x20) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0xa9, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) recvmsg(r4, &(0x7f0000001a40)={&(0x7f0000000580)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000800)=""/30, 0x1e}, {&(0x7f0000000840)=""/102, 0x66}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/195, 0xc3}, 0x40) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x7fffffffffffffff, 0x30400) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff7, @loopback, 0x8}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90084}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="fac47889", @ANYRES16=r7, @ANYBLOB="200026bd7000ffdbdf257b0000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48005) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000008000000000000000b2f1509ba0000000000000000000000000000000000bef300000000000000"], 0x58) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)=r3) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c80)={0xffffffffffffffff, &(0x7f0000001cc0)="48604981f54db1f2c9d0ea253bd450f149724ba8ffffbb4e497b66571844e93b576651783558e0f4e2e99346a6fda0d225085ce51ccc45e7d52eec5b9ba1c15bed1302809e84bb497e53897aee96054e684f6413eaee48f03f438a3ba5776621287665249a8eaba7c4495ce23bd620d98280ecb0fe5ea0c2deabbe119986edcc7253688ceb454c608ad7d4a8c93cd80dc4b9b65da3d8b05f6c983f6da331fdfdea14ae8c3a918ed4ac265f671078ac246429478ea4bd22ced1307da7ee1f232d2c47ea5316a937f306a57ff1f6305f450397138d9a6c543aea2e7dad488da14530312985865ab49e2122be", &(0x7f0000001c00)=@tcp6, 0x4}, 0x20) (async) 08:24:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/154, 0x9a, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:47 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e2c000/0x1000)=nil, 0x1000, 0x3000000, 0x12, r1, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000587000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r1, 0x10000000) r6 = syz_open_pts(r1, 0x4080) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0xaf7, {0x0, r6}, 0x7f, 0xd, 0x1, {0x0, r10, r0}}, 0x16eb) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xd89, 0x3, &(0x7f00000003c0)="e933cc604b420587b5e84c8475962eac77977e218eb0752d583d5e189083b895e455d81b26e5b6599d32d4a1ddd997e794c3", 0x7, 0x0, 0x1}, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "df26cac2f261cbeb12d639a961898150"}, 0x11, 0x2) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000e2c000/0x1000)=nil, 0x1000, 0x3000000, 0x12, r1, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000587000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r1, 0x10000000) (async) syz_open_pts(r1, 0x4080) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0xaf7, {0x0, r6}, 0x7f, 0xd, 0x1, {0x0, r10, r0}}, 0x16eb) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xd89, 0x3, &(0x7f00000003c0)="e933cc604b420587b5e84c8475962eac77977e218eb0752d583d5e189083b895e455d81b26e5b6599d32d4a1ddd997e794c3", 0x7, 0x0, 0x1}, 0x0) (async) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "df26cac2f261cbeb12d639a961898150"}, 0x11, 0x2) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:47 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000c9b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/134, 0x86, 0x1, &(0x7f0000000300)=""/241, 0xf1}, &(0x7f0000000180)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f00007a0000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xb92a5f6cf7384008, &(0x7f0000000400)=""/121, 0x79}, &(0x7f00000004c0)=0x40) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2431.744041][T30055] loop1: detected capacity change from 0 to 140 [ 2431.771495][T30055] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2431.798238][T30055] EXT4-fs (loop1): get root inode failed [ 2431.803994][T30055] EXT4-fs (loop1): mount failed 08:24:48 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 08:24:48 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async, rerun: 64) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async, rerun: 64) splice(r0, 0x0, r2, 0x0, 0xa9, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (rerun: 64) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r4, &(0x7f0000001a40)={&(0x7f0000000580)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000800)=""/30, 0x1e}, {&(0x7f0000000840)=""/102, 0x66}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/195, 0xc3}, 0x40) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7fffffffffffffff, 0x30400) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffff7, @loopback, 0x8}, 0x1c) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="01042abd7000fbdbdf258800000008"], 0x50}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90084}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="fac47889", @ANYRES16=r7, @ANYBLOB="200026bd7000ffdbdf257b0000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48005) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000008000000000000000b2f1509ba0000000000000000000000000000000000bef300000000000000"], 0x58) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000040)=r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c80)={0xffffffffffffffff, &(0x7f0000001cc0)="48604981f54db1f2c9d0ea253bd450f149724ba8ffffbb4e497b66571844e93b576651783558e0f4e2e99346a6fda0d225085ce51ccc45e7d52eec5b9ba1c15bed1302809e84bb497e53897aee96054e684f6413eaee48f03f438a3ba5776621287665249a8eaba7c4495ce23bd620d98280ecb0fe5ea0c2deabbe119986edcc7253688ceb454c608ad7d4a8c93cd80dc4b9b65da3d8b05f6c983f6da331fdfdea14ae8c3a918ed4ac265f671078ac246429478ea4bd22ced1307da7ee1f232d2c47ea5316a937f306a57ff1f6305f450397138d9a6c543aea2e7dad488da14530312985865ab49e2122be", &(0x7f0000001c00)=@tcp6, 0x4}, 0x20) 08:24:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:48 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e2c000/0x1000)=nil, 0x1000, 0x3000000, 0x12, r1, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000587000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r1, 0x10000000) (async) r6 = syz_open_pts(r1, 0x4080) (async) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0xa, 0xaf7, {0x0, r6}, 0x7f, 0xd, 0x1, {0x0, r10, r0}}, 0x16eb) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xd89, 0x3, &(0x7f00000003c0)="e933cc604b420587b5e84c8475962eac77977e218eb0752d583d5e189083b895e455d81b26e5b6599d32d4a1ddd997e794c3", 0x7, 0x0, 0x1}, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "df26cac2f261cbeb12d639a961898150"}, 0x11, 0x2) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:48 executing program 5: r0 = syz_io_uring_setup(0x4293, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000b8c000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xc0}}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f000098f000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, r0, 0x10000000) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r9 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r12}}, 0x1) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000240)={0x8080, 0x0, 0x4}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r12}}, 0xfff) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r4, &(0x7f0000000040)={0x22002, 0x8}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0x3) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:48 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x176}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_setup(0xc7a, &(0x7f0000000180)={0x0, 0x48c8, 0x1, 0x2, 0x2ca}, &(0x7f00008d5000/0x1000)=nil, &(0x7f0000aa9000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)=0x0) (async) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x80, 0x3, 0x7, 0x0, 0x27fe40, 0x4, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000003c0), 0xe}, 0x813, 0x8, 0x2d, 0x2, 0x3, 0xa5de, 0x20, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x5) 08:24:48 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) sendto$inet6(r2, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdd045798707bed4dca1400000f0f8ee77b000000812164e50984b62d2f5cb811aeaa2142", 0x30, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2432.205292][T30077] loop1: detected capacity change from 0 to 140 [ 2432.230219][T30077] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:48 executing program 5: r0 = syz_io_uring_setup(0x4293, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000b8c000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xc0}}, 0x0) (async, rerun: 32) r3 = mmap$IORING_OFF_SQES(&(0x7f000098f000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, r0, 0x10000000) (async, rerun: 32) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) r9 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r12}}, 0x1) (async, rerun: 32) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000240)={0x8080, 0x0, 0x4}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r12}}, 0xfff) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r4, &(0x7f0000000040)={0x22002, 0x8}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0x3) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:48 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c841) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) r0 = msgget$private(0x0, 0x0) msgget$private(0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, 0x0, 0x88000cc, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x504}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x2, 0x200, 0x7}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x401, 0x3, 0x400, 0x7fff}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) msgctl$IPC_RMID(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4cd7, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:48 executing program 5: r0 = syz_io_uring_setup(0x4293, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000b8c000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xc0}}, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f000098f000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, r0, 0x10000000) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) r9 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r12}}, 0x1) (async) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000240)={0x8080, 0x0, 0x4}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r12}}, 0xfff) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r4, &(0x7f0000000040)={0x22002, 0x8}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0x3) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2432.259101][T30077] EXT4-fs (loop1): get root inode failed [ 2432.264781][T30077] EXT4-fs (loop1): mount failed 08:24:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:48 executing program 5: alarm(0x7) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000600), 0x72b45ffbafa62e7d) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006300000005000025ce000b000f00c00c110000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="001f5833e47adf8d4161fccdbefb7b0ce0a1a67a62523128bbed01d605e1488956ff58e3f9a2043c9afbbd6e1c7f367d5765ba7a1fca3530f51ad3e13f4dc42cd8d8a762892fa0bbc988cef1660637d5b0dea797f0f8ee5a81f09acf6a6d9fcb522b31f11314c9621ff93f18f8552b14a31c2bd376e7734b0215f6ebea09f2de1cca8ab7c9e73a61701adad81d24defef915856e4d9688a676000000c6e90eaf4fcc4e91d3822572600000000067082659645621a6941ca8eb733c77368f68a29d852cf0a56ea5abe80a8e6edcc2bb8acbd83bc9aded249dc7c0c2d34403c3df303066a1d8f0b9f8c5317bbf340363dca855a1b1404b04d9967347e95342e2e1619208d67494992c343d54f70102ac9b4a5cae11c09a9f5b8d196d7a74198840436adc78b9fa217c5579cbaf8f7f2b000e7a7852585194dcb831900e40c0eee160f5bdd34fd2a1eb9727e3409784e2fe9c77db0ccfbe905c8c28fea5a0ae94af676f20b1d133c00e899eab0a712a52becfebba9a554266e95c495948c0928722541b51020efec006db841aa3eaaa"]) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) setuid(0x0) r7 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x101044, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x3ad87607}}, {@cache_mmap}, {@dfltuid}, {@nodevmap}, {@afid={'afid', 0x3d, 0x1}}, {@cache_fscache}, {@afid}, {@access_user}, {@access_any}], [{@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'cgroup.procs\x00\xc3}u\xab\xf4\x87\x8f$\xa8\xc3[cm?\xd6'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x30, 0x33, 0x35, 0x66, 0x30, 0x35], 0x2d, [0x36, 0x39, 0x32, 0x39], 0x2d, [0x37, 0x64, 0x37, 0xb], 0x2d, [0x66, 0x62, 0x31, 0x39], 0x2d, [0x31, 0x62, 0x38, 0x61, 0x34, 0x36, 0x32, 0x64]}}}, {@subj_user={'subj_user', 0x3d, '#}'}}, {@uid_gt={'uid>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@permit_directio}]}}) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000140)=0x317f, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) alarm(0x8000000000000000) [ 2432.351515][T30122] loop1: detected capacity change from 0 to 140 [ 2432.410166][T30122] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2432.411859][T30126] loop5: detected capacity change from 0 to 264192 [ 2432.432334][T30122] EXT4-fs (loop1): get root inode failed [ 2432.433551][ T24] audit: type=1400 audit(1659515088.542:180396): avc: denied { mounton } for pid=30124 comm="syz-executor.5" path="/root/syzkaller-testdir163123050/syzkaller.A9RpDY/2807/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2432.438029][T30122] EXT4-fs (loop1): mount failed [ 2432.490328][T30126] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2432.524815][T30126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2432.625214][ T1825] EXT4-fs (loop5): unmounting filesystem. 08:24:48 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 08:24:48 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x176}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_setup(0xc7a, &(0x7f0000000180)={0x0, 0x48c8, 0x1, 0x2, 0x2ca}, &(0x7f00008d5000/0x1000)=nil, &(0x7f0000aa9000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)=0x0) (async) r7 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x80, 0x3, 0x7, 0x0, 0x27fe40, 0x4, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000003c0), 0xe}, 0x813, 0x8, 0x2d, 0x2, 0x3, 0xa5de, 0x20, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x8) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r10}}, 0x1) (async) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x5) 08:24:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/156, 0x9c, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:48 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) (rerun: 64) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c841) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async, rerun: 64) r0 = msgget$private(0x0, 0x0) (async, rerun: 64) msgget$private(0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, 0x0, 0x88000cc, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x504}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x2, 0x200, 0x7}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x401, 0x3, 0x400, 0x7fff}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) msgctl$IPC_RMID(r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4cd7, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 08:24:48 executing program 5: alarm(0x7) (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000600), 0x72b45ffbafa62e7d) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006300000005000025ce000b000f00c00c110000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) (async, rerun: 64) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 64) setuid(0x0) (async, rerun: 32) r7 = geteuid() (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x101044, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x3ad87607}}, {@cache_mmap}, {@dfltuid}, {@nodevmap}, {@afid={'afid', 0x3d, 0x1}}, {@cache_fscache}, {@afid}, {@access_user}, {@access_any}], [{@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'cgroup.procs\x00\xc3}u\xab\xf4\x87\x8f$\xa8\xc3[cm?\xd6'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x30, 0x33, 0x35, 0x66, 0x30, 0x35], 0x2d, [0x36, 0x39, 0x32, 0x39], 0x2d, [0x37, 0x64, 0x37, 0xb], 0x2d, [0x66, 0x62, 0x31, 0x39], 0x2d, [0x31, 0x62, 0x38, 0x61, 0x34, 0x36, 0x32, 0x64]}}}, {@subj_user={'subj_user', 0x3d, '#}'}}, {@uid_gt={'uid>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@permit_directio}]}}) (async) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000140)=0x317f, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) alarm(0x8000000000000000) 08:24:48 executing program 5: alarm(0x7) (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000600), 0x72b45ffbafa62e7d) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006300000005000025ce000b000f00c00c110000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="001f5833e47adf8d4161fccdbefb7b0ce0a1a67a62523128bbed01d605e1488956ff58e3f9a2043c9afbbd6e1c7f367d5765ba7a1fca3530f51ad3e13f4dc42cd8d8a762892fa0bbc988cef1660637d5b0dea797f0f8ee5a81f09acf6a6d9fcb522b31f11314c9621ff93f18f8552b14a31c2bd376e7734b0215f6ebea09f2de1cca8ab7c9e73a61701adad81d24defef915856e4d9688a676000000c6e90eaf4fcc4e91d3822572600000000067082659645621a6941ca8eb733c77368f68a29d852cf0a56ea5abe80a8e6edcc2bb8acbd83bc9aded249dc7c0c2d34403c3df303066a1d8f0b9f8c5317bbf340363dca855a1b1404b04d9967347e95342e2e1619208d67494992c343d54f70102ac9b4a5cae11c09a9f5b8d196d7a74198840436adc78b9fa217c5579cbaf8f7f2b000e7a7852585194dcb831900e40c0eee160f5bdd34fd2a1eb9727e3409784e2fe9c77db0ccfbe905c8c28fea5a0ae94af676f20b1d133c00e899eab0a712a52becfebba9a554266e95c495948c0928722541b51020efec006db841aa3eaaa"]) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) setuid(0x0) (async) r7 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x101044, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x3ad87607}}, {@cache_mmap}, {@dfltuid}, {@nodevmap}, {@afid={'afid', 0x3d, 0x1}}, {@cache_fscache}, {@afid}, {@access_user}, {@access_any}], [{@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'cgroup.procs\x00\xc3}u\xab\xf4\x87\x8f$\xa8\xc3[cm?\xd6'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x30, 0x33, 0x35, 0x66, 0x30, 0x35], 0x2d, [0x36, 0x39, 0x32, 0x39], 0x2d, [0x37, 0x64, 0x37, 0xb], 0x2d, [0x66, 0x62, 0x31, 0x39], 0x2d, [0x31, 0x62, 0x38, 0x61, 0x34, 0x36, 0x32, 0x64]}}}, {@subj_user={'subj_user', 0x3d, '#}'}}, {@uid_gt={'uid>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@permit_directio}]}}) r8 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000140)=0x317f, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) alarm(0x8000000000000000) [ 2432.725519][T30151] loop1: detected capacity change from 0 to 140 [ 2432.785679][T30151] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2432.800090][T30151] EXT4-fs (loop1): get root inode failed [ 2432.805761][T30151] EXT4-fs (loop1): mount failed 08:24:49 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) sendto$inet6(r2, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdd045798707bed4dca1400000f0f8ee77b000000812164e50984b62d2f5cb811aeaa2142", 0x30, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) (async) sendto$inet6(r2, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdd045798707bed4dca1400000f0f8ee77b000000812164e50984b62d2f5cb811aeaa2142", 0x30, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:49 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:49 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x4, 0xc0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 08:24:49 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c841) (async) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) r0 = msgget$private(0x0, 0x0) (async) msgget$private(0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, 0x0, 0x88000cc, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x504}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x2, 0x200, 0x7}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20, {0x401, 0x3, 0x400, 0x7fff}}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) msgctl$IPC_RMID(r0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4cd7, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:49 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 2433.100974][T30169] loop1: detected capacity change from 0 to 140 [ 2433.141829][T30169] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2433.170372][T30169] EXT4-fs (loop1): get root inode failed [ 2433.176046][T30169] EXT4-fs (loop1): mount failed 08:24:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:49 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) sendto$inet6(r2, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdd045798707bed4dca1400000f0f8ee77b000000812164e50984b62d2f5cb811aeaa2142", 0x30, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) (async) sendto$inet6(r2, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdd045798707bed4dca1400000f0f8ee77b000000812164e50984b62d2f5cb811aeaa2142", 0x30, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:49 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x4, 0xc0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 2433.290736][T30188] loop1: detected capacity change from 0 to 140 08:24:49 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = socket(0x11, 0x2, 0x0) (async, rerun: 64) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r2 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x4, 0xc0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x6019, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 08:24:49 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2433.358136][T30188] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid 08:24:49 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000300010000000000000094e7f9"]) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:49 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:49 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0xc000) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x4) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2433.441792][T30188] EXT4-fs (loop1): get root inode failed [ 2433.447484][T30188] EXT4-fs (loop1): mount failed 08:24:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c", 0x9d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:49 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2433.517941][T30223] loop1: detected capacity change from 0 to 140 [ 2433.521819][T29279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2433.533456][T29279] Buffer I/O error on dev loop1, logical block 0, async page read [ 2433.577496][T30223] EXT4-fs error (device loop1): __ext4_fill_super:5234: inode #2: comm syz-executor.1: iget: checksum invalid [ 2433.597626][T30236] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2433.618466][T30223] EXT4-fs (loop1): get root inode failed [ 2433.624161][T30223] EXT4-fs (loop1): mount failed 08:24:49 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 08:24:49 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:49 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000010a010200000000000000000500000a0c000440000000000000000197000600cfeeb9bdd4cb6e87c7c5a026440a3baa2ac424758ccc826f85fcf98dd6f1062a3653e1e011cf368ba14a8fc42a5ab4a6fda3956d12d1f229a5b18a5b9139a2d0a511bee22e03114a7868f87892b5428169e38b9b672054172ab01023702295618041590738d958c1d932c67dd0972a085e029a4f7f4fcf8b62bc67ae4de6660bfa3a129f84cbe8b9b48a03c71b000c000440000000000000000508000240000000000900010073797a30000000000900010073797a31000000000c00044000000000000000050800024097f86624000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x880) r6 = gettid() tkill(r6, 0x7) syz_open_procfs(r6, &(0x7f0000000400)='attr/sockcreate\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0xe54f, 0x4) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000300010000000000000094e7f9"]) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2433.825693][T30248] loop1: detected capacity change from 0 to 7 08:24:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2433.870708][T30248] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) [ 2433.945379][T30263] loop1: detected capacity change from 0 to 7 [ 2433.962635][T30263] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) 08:24:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:50 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7674, &(0x7f0000000240)={0x0, 0x661d, 0x2, 0x1, 0x34f, 0x0, r3}, &(0x7f0000b91000/0x4000)=nil, &(0x7f000073f000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8010}, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000f0d000/0x1000)=nil, 0x1000, 0x9, 0x1, {0x0, r6}}, 0x8001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2434.066895][T30265] loop1: detected capacity change from 0 to 7 [ 2434.098755][T30265] EXT4-fs (loop1): bad geometry: block count 64 exceeds size of device (3 blocks) 08:24:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2434.216861][T30270] loop1: detected capacity change from 0 to 140 [ 2434.248464][T30270] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:50 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0xc000) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x4) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000003400)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0xc000) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x4) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) (async) 08:24:50 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000010a010200000000000000000500000a0c000440000000000000000197000600cfeeb9bdd4cb6e87c7c5a026440a3baa2ac424758ccc826f85fcf98dd6f1062a3653e1e011cf368ba14a8fc42a5ab4a6fda3956d12d1f229a5b18a5b9139a2d0a511bee22e03114a7868f87892b5428169e38b9b672054172ab01023702295618041590738d958c1d932c67dd0972a085e029a4f7f4fcf8b62bc67ae4de6660bfa3a129f84cbe8b9b48a03c71b000c000440000000000000000508000240000000000900010073797a30000000000900010073797a31000000000c00044000000000000000050800024097f86624000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x880) r6 = gettid() tkill(r6, 0x7) syz_open_procfs(r6, &(0x7f0000000400)='attr/sockcreate\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0xe54f, 0x4) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000010a010200000000000000000500000a0c000440000000000000000197000600cfeeb9bdd4cb6e87c7c5a026440a3baa2ac424758ccc826f85fcf98dd6f1062a3653e1e011cf368ba14a8fc42a5ab4a6fda3956d12d1f229a5b18a5b9139a2d0a511bee22e03114a7868f87892b5428169e38b9b672054172ab01023702295618041590738d958c1d932c67dd0972a085e029a4f7f4fcf8b62bc67ae4de6660bfa3a129f84cbe8b9b48a03c71b000c000440000000000000000508000240000000000900010073797a30000000000900010073797a31000000000c00044000000000000000050800024097f86624000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) gettid() (async) tkill(r6, 0x7) (async) syz_open_procfs(r6, &(0x7f0000000400)='attr/sockcreate\x00') (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x1) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0xe54f, 0x4) (async) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:50 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x7674, &(0x7f0000000240)={0x0, 0x661d, 0x2, 0x1, 0x34f, 0x0, r3}, &(0x7f0000b91000/0x4000)=nil, &(0x7f000073f000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8010}, 0x0, {0x0, r6}}, 0x9) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}, 0x1) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000f0d000/0x1000)=nil, 0x1000, 0x9, 0x1, {0x0, r6}}, 0x8001) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000300010000000000000094e7f9"]) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:50 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 08:24:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan1\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() tkill(r4, 0x7) syz_open_procfs(r4, &(0x7f0000000000)='net/ipv6_route\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:50 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7674, &(0x7f0000000240)={0x0, 0x661d, 0x2, 0x1, 0x34f, 0x0, r3}, &(0x7f0000b91000/0x4000)=nil, &(0x7f000073f000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8010}, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000f0d000/0x1000)=nil, 0x1000, 0x9, 0x1, {0x0, r6}}, 0x8001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x7674, &(0x7f0000000240)={0x0, 0x661d, 0x2, 0x1, 0x34f, 0x0, r3}, &(0x7f0000b91000/0x4000)=nil, &(0x7f000073f000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000340)) (async) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x8010}, 0x0, {0x0, r6}}, 0x9) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000f0d000/0x1000)=nil, 0x1000, 0x9, 0x1, {0x0, r6}}, 0x8001) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2434.501663][T30304] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2434.524864][T30307] loop1: detected capacity change from 0 to 140 08:24:50 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0xc000) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x4) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:50 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r3, &(0x7f0000000080)="06587865e1a117dac52fbdd406d191bafdeeb51857b8fa21b0e499f448e560d04aa3c4923d8a7c7351907ae51eda24d8fa3fc3145450f4690f", 0x39, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ee5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2434.554900][T30307] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2434.648035][T30346] loop1: detected capacity change from 0 to 140 [ 2434.683705][T30347] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:50 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000010a010200000000000000000500000a0c000440000000000000000197000600cfeeb9bdd4cb6e87c7c5a026440a3baa2ac424758ccc826f85fcf98dd6f1062a3653e1e011cf368ba14a8fc42a5ab4a6fda3956d12d1f229a5b18a5b9139a2d0a511bee22e03114a7868f87892b5428169e38b9b672054172ab01023702295618041590738d958c1d932c67dd0972a085e029a4f7f4fcf8b62bc67ae4de6660bfa3a129f84cbe8b9b48a03c71b000c000440000000000000000508000240000000000900010073797a30000000000900010073797a31000000000c00044000000000000000050800024097f86624000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x880) r6 = gettid() tkill(r6, 0x7) syz_open_procfs(r6, &(0x7f0000000400)='attr/sockcreate\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0xe54f, 0x4) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000010a010200000000000000000500000a0c000440000000000000000197000600cfeeb9bdd4cb6e87c7c5a026440a3baa2ac424758ccc826f85fcf98dd6f1062a3653e1e011cf368ba14a8fc42a5ab4a6fda3956d12d1f229a5b18a5b9139a2d0a511bee22e03114a7868f87892b5428169e38b9b672054172ab01023702295618041590738d958c1d932c67dd0972a085e029a4f7f4fcf8b62bc67ae4de6660bfa3a129f84cbe8b9b48a03c71b000c000440000000000000000508000240000000000900010073797a30000000000900010073797a31000000000c00044000000000000000050800024097f86624000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) gettid() (async) tkill(r6, 0x7) (async) syz_open_procfs(r6, &(0x7f0000000400)='attr/sockcreate\x00') (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000040)=0x1) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000003c0)=0xe54f, 0x4) (async) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:50 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2434.693473][T30346] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2434.785570][T30351] loop1: detected capacity change from 0 to 140 [ 2434.810192][T30351] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2434.898537][T30371] loop1: detected capacity change from 0 to 140 [ 2434.933333][T30371] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2435.080860][T30373] loop1: detected capacity change from 0 to 140 [ 2435.093654][T30373] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:51 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 08:24:51 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:51 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0xffffff0f, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x19001) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0xa}, 0x40) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:51 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan1\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() tkill(r4, 0x7) syz_open_procfs(r4, &(0x7f0000000000)='net/ipv6_route\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan1\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) gettid() (async) tkill(r4, 0x7) (async) syz_open_procfs(r4, &(0x7f0000000000)='net/ipv6_route\x00') (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) [ 2435.310296][T30377] loop1: detected capacity change from 0 to 140 [ 2435.319845][T30377] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:51 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r3, &(0x7f0000000080)="06587865e1a117dac52fbdd406d191bafdeeb51857b8fa21b0e499f448e560d04aa3c4923d8a7c7351907ae51eda24d8fa3fc3145450f4690f", 0x39, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ee5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:51 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0xffffff0f, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x19001) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0xa}, 0x40) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0xffffff0f, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x19001) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a010200000000000000000a00000708002540000000000c000240000000000000000208000a400000000128000480140003006970766c616e300000000000000000000800014000000000080002401fb35de3740000000b0a010800000000000000000200000608000840000000010800044000000036080007400000002d2c0011800c000100636f756e746572001c0002800c00014000000000000000070c0002400000000000000001080005400000002608000a40000000030900010073797acb00000000c8000000180a01030000000000000000020000040900010073797a310000000070000380080002400000004054000380140001006e7230000000000000000000000000001400010069657468305f746f77a89ac8646765001400010065727370616e3000000000000000000014000100766c616e3000000000000000000000000800024000000004080001400000000008000740000000000c00054000000000000000050900020073797a32000000000900010073797a31000000000900010073797a310000000038010000140a030000000000000000000c0000010900024e03f9d734027aa55b6044b0c90073797a3200000000080003400000000308000340000000040900020073797a3100000000e1000800396b1fd0a9805ef074381723f092af1cd9287bd7122a6858e194afafafe3058b08164ff6a57dbf9c24c1f900c482c485fe7d582913c88fff57f8185781506b17434305e57986469aabfd8cc22908d5aae0b02a3a0ba8ffe1a5f4e046747b9f47d7e2884f8255d3440de580d9b3451930c2113b337f0162f409ade8de5fb99bc4d3d9e29276203d3fca63cf55c9611ac9cb5519e135a7c96e5119e9ec647fd5101b47a33363a09f3c04f45f0c6e10412f926d56c1e1feca4212442847de6622224f1c20f0b30bbfdf49f113d8a2a37d11e29fea12b9c389211c01aa7783f2640000000c000640000000000000000309000200000000140000001100010000000000000000000000000a00"], 0x2f4}, 0x1, 0x0, 0x0, 0xa}, 0x40) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:51 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:51 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r3, &(0x7f0000000080)="06587865e1a117dac52fbdd406d191bafdeeb51857b8fa21b0e499f448e560d04aa3c4923d8a7c7351907ae51eda24d8fa3fc3145450f4690f", 0x39, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ee5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:51 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0xffffff0f, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x19001) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0xa}, 0x40) (async) socket(0x11, 0x2, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (rerun: 64) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 32) [ 2435.463403][T30402] loop1: detected capacity change from 0 to 140 [ 2435.480963][T30402] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2435.571630][T30428] loop1: detected capacity change from 0 to 140 [ 2435.578621][T30429] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2435.591100][T30428] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? 08:24:51 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x9, 0x1, 0x10000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e24, 0xff, @private2, 0x1f}, r5}}, 0x38) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syncfs(r1) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:53 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 08:24:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b000500", 0x30, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:53 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0xb, 0x1010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000007c0)=0x306c, 0x0, 0x4) io_uring_enter(r0, 0x6bfd, 0xe0a5, 0x3, &(0x7f0000000780)={[0x7]}, 0x8) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x20}}, 0x80000001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r9 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x8007, @fd_index=0x3, 0x10040000, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000800)=""/102400, 0xee}], 0x5, 0x10}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2d) [ 2437.221056][T30437] loop1: detected capacity change from 0 to 140 [ 2437.252725][T30437] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (49734!=0) [ 2437.262066][T30437] EXT4-fs (loop1): group descriptors corrupted! 08:24:54 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan1\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = gettid() tkill(r4, 0x7) (async) syz_open_procfs(r4, &(0x7f0000000000)='net/ipv6_route\x00') (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:54 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) splice(r3, 0x0, r2, 0x0, 0x400004, 0x7) r4 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000000c0)="fb5b7f06631e5bb289ef36ab", &(0x7f0000000180)=""/160, &(0x7f0000000300)="745f54e63bd81ecdca442a1c459a2845dc11314013e45f5914f05317502022b8086748f73cec1ee4bbfc124e9b72287c6f46cb7f20f5dd0fd16664864ffb56fc50ff13450e37b56a83dd0e04cb3b12a8358b41baca955dbabcd01d08849f3fff461835a69caf0e5b2849b07f36eebc5653aeea012135e4debfed6266933201b73d4ab5057e08acf8173ca35ba2c7fa2546c8f1e23f750f546f75cf8c01baa16c7cb35d4dbed7339340ad5a9fd8f3b4b67e3857b6449045681e0504d5e48637435cae972ead9c81995ccd25fdb42128a20ab81b0cbb7971f401e3b91a1537afb0e0cf55bbd8a747ef1f7a", &(0x7f0000000400)="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", 0x3ff, r2, 0x4}, 0x38) close(r4) 08:24:54 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0xb, 0x1010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000007c0)=0x306c, 0x0, 0x4) (async) io_uring_enter(r0, 0x6bfd, 0xe0a5, 0x3, &(0x7f0000000780)={[0x7]}, 0x8) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) (async) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x20}}, 0x80000001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r9 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r7, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x8007, @fd_index=0x3, 0x10040000, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000800)=""/102400, 0xee}], 0x5, 0x10}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2d) 08:24:54 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0xb, 0x1010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000007c0)=0x306c, 0x0, 0x4) io_uring_enter(r0, 0x6bfd, 0xe0a5, 0x3, &(0x7f0000000780)={[0x7]}, 0x8) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x20}}, 0x80000001) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r9 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x8007, @fd_index=0x3, 0x10040000, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000800)=""/102400, 0xee}], 0x5, 0x10}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2d) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0xb, 0x1010, 0xffffffffffffffff, 0x8000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000007c0)=0x306c, 0x0, 0x4) (async) io_uring_enter(r0, 0x6bfd, 0xe0a5, 0x3, &(0x7f0000000780)={[0x7]}, 0x8) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x20}}, 0x80000001) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async) socket$inet(0x2, 0x6, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) (async) syz_io_uring_submit(r7, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x8007, @fd_index=0x3, 0x10040000, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000800)=""/102400, 0xee}], 0x5, 0x10}, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2d) (async) 08:24:54 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x204180, 0x44) 08:24:54 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 08:24:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf25070000000a0009000180c20000030000050037e8ff00000005002f000100000005003700010000000800340086000000450035000000000008003c003f0000000800030012665b82fc3a85cfde71987d377ddce01b20c6b105f45df97f708cdd45453ab7821c000f11dec36b57f0c717c99197ea1779a1a6f8e7d000b3be22944851454fa0d2e3c4cf4b96f2b6a4b421e518aaa4e079a8ddea2adf9c7065b36028dcc4060000009a73c2c23a5da0be8f5cce35ef", @ANYRES32=r6, @ANYBLOB="1be5b73c68b1eb7fb1a264954c19ff214a143c476eed9da643aed4c179680e6dbe710c04586012e6c4db67a6f5d929c1694b69675b84ed9c20e6c9fdf0bb4e613c42b59900acf6c481f9d78e5fefc8709dbfbb1f9a0ae343c81abd6161"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000, 0x800000}, 0x340, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x80000001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r9, 0x0, r10, 0x0, 0x88000cc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r9, 0x80, &(0x7f0000000340)=@in6={0xa, 0x4e20, 0x6, @empty, 0x200}, 0x0, 0x0, 0x1}, 0x8) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20722e591545d6020000000000000000000706010200000000f30000000600000a090002000000bf7653c2c8d330a95600"], 0x20}}, 0x24000080) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:54 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x204180, 0x44) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x204180, 0x44) (async) 08:24:56 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x9, 0x1, 0x10000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e24, 0xff, @private2, 0x1f}, r5}}, 0x38) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syncfs(r1) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x9, 0x1, 0x10000) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e24, 0xff, @private2, 0x1f}, r5}}, 0x38) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syncfs(r1) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:24:56 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 08:24:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b000500", 0x30, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:56 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) splice(r3, 0x0, r2, 0x0, 0x400004, 0x7) r4 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000000c0)="fb5b7f06631e5bb289ef36ab", &(0x7f0000000180)=""/160, &(0x7f0000000300)="745f54e63bd81ecdca442a1c459a2845dc11314013e45f5914f05317502022b8086748f73cec1ee4bbfc124e9b72287c6f46cb7f20f5dd0fd16664864ffb56fc50ff13450e37b56a83dd0e04cb3b12a8358b41baca955dbabcd01d08849f3fff461835a69caf0e5b2849b07f36eebc5653aeea012135e4debfed6266933201b73d4ab5057e08acf8173ca35ba2c7fa2546c8f1e23f750f546f75cf8c01baa16c7cb35d4dbed7339340ad5a9fd8f3b4b67e3857b6449045681e0504d5e48637435cae972ead9c81995ccd25fdb42128a20ab81b0cbb7971f401e3b91a1537afb0e0cf55bbd8a747ef1f7a", &(0x7f0000000400)="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", 0x3ff, r2, 0x4}, 0x38) close(r4) pipe(&(0x7f0000000100)) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) splice(r3, 0x0, r2, 0x0, 0x400004, 0x7) (async) socket$rds(0x15, 0x5, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000000c0)="fb5b7f06631e5bb289ef36ab", &(0x7f0000000180)=""/160, &(0x7f0000000300)="745f54e63bd81ecdca442a1c459a2845dc11314013e45f5914f05317502022b8086748f73cec1ee4bbfc124e9b72287c6f46cb7f20f5dd0fd16664864ffb56fc50ff13450e37b56a83dd0e04cb3b12a8358b41baca955dbabcd01d08849f3fff461835a69caf0e5b2849b07f36eebc5653aeea012135e4debfed6266933201b73d4ab5057e08acf8173ca35ba2c7fa2546c8f1e23f750f546f75cf8c01baa16c7cb35d4dbed7339340ad5a9fd8f3b4b67e3857b6449045681e0504d5e48637435cae972ead9c81995ccd25fdb42128a20ab81b0cbb7971f401e3b91a1537afb0e0cf55bbd8a747ef1f7a", &(0x7f0000000400)="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", 0x3ff, r2, 0x4}, 0x38) (async) close(r4) (async) [ 2440.870456][T30484] loop1: detected capacity change from 0 to 140 [ 2440.905198][T30484] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (49734!=0) [ 2440.914481][T30484] EXT4-fs (loop1): group descriptors corrupted! 08:24:57 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async, rerun: 32) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r2}, 0x38) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r3}, 0x38) (async) splice(r3, 0x0, r2, 0x0, 0x400004, 0x7) (async, rerun: 32) r4 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000000c0)="fb5b7f06631e5bb289ef36ab", &(0x7f0000000180)=""/160, &(0x7f0000000300)="745f54e63bd81ecdca442a1c459a2845dc11314013e45f5914f05317502022b8086748f73cec1ee4bbfc124e9b72287c6f46cb7f20f5dd0fd16664864ffb56fc50ff13450e37b56a83dd0e04cb3b12a8358b41baca955dbabcd01d08849f3fff461835a69caf0e5b2849b07f36eebc5653aeea012135e4debfed6266933201b73d4ab5057e08acf8173ca35ba2c7fa2546c8f1e23f750f546f75cf8c01baa16c7cb35d4dbed7339340ad5a9fd8f3b4b67e3857b6449045681e0504d5e48637435cae972ead9c81995ccd25fdb42128a20ab81b0cbb7971f401e3b91a1537afb0e0cf55bbd8a747ef1f7a", &(0x7f0000000400)="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", 0x3ff, r2, 0x4}, 0x38) close(r4) 08:24:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf25070000000a0009000180c20000030000050037e8ff00000005002f000100000005003700010000000800340086000000450035000000000008003c003f0000000800030012665b82fc3a85cfde71987d377ddce01b20c6b105f45df97f708cdd45453ab7821c000f11dec36b57f0c717c99197ea1779a1a6f8e7d000b3be22944851454fa0d2e3c4cf4b96f2b6a4b421e518aaa4e079a8ddea2adf9c7065b36028dcc4060000009a73c2c23a5da0be8f5cce35ef", @ANYRES32=r6, @ANYBLOB="1be5b73c68b1eb7fb1a264954c19ff214a143c476eed9da643aed4c179680e6dbe710c04586012e6c4db67a6f5d929c1694b69675b84ed9c20e6c9fdf0bb4e613c42b59900acf6c481f9d78e5fefc8709dbfbb1f9a0ae343c81abd6161"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000, 0x800000}, 0x340, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x80000001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r9, 0x0, r10, 0x0, 0x88000cc, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r9, 0x80, &(0x7f0000000340)=@in6={0xa, 0x4e20, 0x6, @empty, 0x200}, 0x0, 0x0, 0x1}, 0x8) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20722e591545d6020000000000000000000706010200000000f30000000600000a090002000000bf7653c2c8d330a95600"], 0x20}}, 0x24000080) (async) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b000500", 0x30, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:24:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r3 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf25070000000a0009000180c20000030000050037e8ff00000005002f000100000005003700010000000800340086000000450035000000000008003c003f0000000800030012665b82fc3a85cfde71987d377ddce01b20c6b105f45df97f708cdd45453ab7821c000f11dec36b57f0c717c99197ea1779a1a6f8e7d000b3be22944851454fa0d2e3c4cf4b96f2b6a4b421e518aaa4e079a8ddea2adf9c7065b36028dcc4060000009a73c2c23a5da0be8f5cce35ef", @ANYRES32=r6, @ANYBLOB="1be5b73c68b1eb7fb1a264954c19ff214a143c476eed9da643aed4c179680e6dbe710c04586012e6c4db67a6f5d929c1694b69675b84ed9c20e6c9fdf0bb4e613c42b59900acf6c481f9d78e5fefc8709dbfbb1f9a0ae343c81abd6161"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000000, 0x800000}, 0x340, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x80000001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r9, 0x0, r10, 0x0, 0x88000cc, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r9, 0x80, &(0x7f0000000340)=@in6={0xa, 0x4e20, 0x6, @empty, 0x200}, 0x0, 0x0, 0x1}, 0x8) (async) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20722e591545d6020000000000000000000706010200000000f30000000600000a090002000000bf7653c2c8d330a95600"], 0x20}}, 0x24000080) io_uring_enter(r3, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:57 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r4}, 0x38) splice(r4, &(0x7f0000000040)=0x100, r2, &(0x7f0000000080)=0x2, 0xffffffffffffffff, 0x2) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:24:57 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4ad7, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x5, @private1, 0xaa}, @in6={0xa, 0x4e22, 0x4, @private2, 0x7f}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}], 0x84) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:24:57 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4ad7, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x5, @private1, 0xaa}, @in6={0xa, 0x4e22, 0x4, @private2, 0x7f}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}], 0x84) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2441.009348][T30532] loop1: detected capacity change from 0 to 140 [ 2441.028836][T30532] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (49734!=0) [ 2441.038152][T30532] EXT4-fs (loop1): group descriptors corrupted! [ 2441.122458][T30548] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:24:57 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x204180, 0x44) 08:25:01 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async, rerun: 32) socket(0x9, 0x1, 0x10000) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e24, 0xff, @private2, 0x1f}, r5}}, 0x38) (async, rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x14}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syncfs(r1) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:01 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4ad7, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x5, @private1, 0xaa}, @in6={0xa, 0x4e22, 0x4, @private2, 0x7f}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}], 0x84) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c0000000000000000", 0x48, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:25:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40080) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x6d2e, &(0x7f0000000240)={0x0, 0x6e36, 0x2, 0x3, 0x22f, 0x0, r0}, &(0x7f0000ce7000/0x1000)=nil, &(0x7f000049b000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000b11000/0x4000)=nil, 0x4000, 0x16, 0x1}, 0x6) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4007, @fd_index=0x4, 0x380000, 0x80000000, 0xd7e, 0x10, 0x0, {0x2}}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, &(0x7f00000004c0)=0x80, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x3f) r12 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x800, 0x1, 0xc}, 0x18) openat$cgroup_ro(r12, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:01 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 08:25:01 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async, rerun: 64) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (rerun: 64) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r4}, 0x38) (async, rerun: 64) splice(r4, &(0x7f0000000040)=0x100, r2, &(0x7f0000000080)=0x2, 0xffffffffffffffff, 0x2) (rerun: 64) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:25:02 executing program 4: socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1d0a, 0xa3d4, 0x1, &(0x7f0000000040)={[0xffffffffffffffef]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:02 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2445.866601][T30566] loop1: detected capacity change from 0 to 140 08:25:02 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async, rerun: 32) socket(0x11, 0x2, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (rerun: 32) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:02 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x24, r4}, 0x38) (async) splice(r4, &(0x7f0000000040)=0x100, r2, &(0x7f0000000080)=0x2, 0xffffffffffffffff, 0x2) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2445.920625][T30566] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (41408!=39978) [ 2445.930296][T30566] EXT4-fs (loop1): group descriptors corrupted! 08:25:02 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40080) (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x6d2e, &(0x7f0000000240)={0x0, 0x6e36, 0x2, 0x3, 0x22f, 0x0, r0}, &(0x7f0000ce7000/0x1000)=nil, &(0x7f000049b000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000b11000/0x4000)=nil, 0x4000, 0x16, 0x1}, 0x6) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) (async) r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4007, @fd_index=0x4, 0x380000, 0x80000000, 0xd7e, 0x10, 0x0, {0x2}}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r11}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, &(0x7f00000004c0)=0x80, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x3f) r12 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x800, 0x1, 0xc}, 0x18) openat$cgroup_ro(r12, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:02 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c0000000000000000", 0x48, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:25:02 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r3, &(0x7f00000001c0)="cfa9580be18a640a08c60f39f2e8ace7", 0x10, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @loopback, 0xb3}, 0x1c) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400004, 0x9) 08:25:02 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x29, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2446.046811][T30598] loop1: detected capacity change from 0 to 140 [ 2446.097937][T30598] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (41408!=39978) [ 2446.107543][T30598] EXT4-fs (loop1): group descriptors corrupted! [ 2446.130812][T30611] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. 08:25:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c0000000000000000", 0x48, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2446.220345][T30613] loop1: detected capacity change from 0 to 140 [ 2446.245554][T30613] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (41408!=39978) [ 2446.255216][T30613] EXT4-fs (loop1): group descriptors corrupted! 08:25:02 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 08:25:02 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40080) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x6d2e, &(0x7f0000000240)={0x0, 0x6e36, 0x2, 0x3, 0x22f, 0x0, r0}, &(0x7f0000ce7000/0x1000)=nil, &(0x7f000049b000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) (async, rerun: 32) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000b11000/0x4000)=nil, 0x4000, 0x16, 0x1}, 0x6) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4007, @fd_index=0x4, 0x380000, 0x80000000, 0xd7e, 0x10, 0x0, {0x2}}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r11}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, &(0x7f00000004c0)=0x80, &(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x3f) (async) r12 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x800, 0x1, 0xc}, 0x18) openat$cgroup_ro(r12, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (rerun: 32) [ 2446.990309][T30617] cgroup: fork rejected by pids controller in /syz5 [ 2452.415560][T30585] ================================================================== [ 2452.423692][T30585] BUG: KCSAN: data-race in __io_fill_cqe_req / io_uring_poll [ 2452.431082][T30585] [ 2452.433410][T30585] read-write to 0xffff888138227a50 of 4 bytes by task 30577 on cpu 0: [ 2452.441571][T30585] __io_fill_cqe_req+0x242/0x5a0 [ 2452.446520][T30585] io_poll_task_func+0x1a8/0x280 [ 2452.451481][T30585] tctx_task_work+0x8d0/0xc10 [ 2452.456177][T30585] task_work_run+0x8e/0x110 [ 2452.460691][T30585] io_uring_try_cancel_requests+0x2d2/0x30b [ 2452.466594][T30585] io_uring_cancel_generic+0x24b/0x415 [ 2452.472069][T30585] __io_uring_cancel+0x11/0x20 [ 2452.476847][T30585] do_exit+0x2c6/0x1720 [ 2452.481014][T30585] do_group_exit+0xa5/0x160 [ 2452.485533][T30585] get_signal+0xf54/0x1020 [ 2452.489964][T30585] arch_do_signal_or_restart+0x87/0x2d0 [ 2452.495520][T30585] exit_to_user_mode_loop+0x78/0x130 [ 2452.500822][T30585] syscall_exit_to_user_mode+0x6a/0x90 [ 2452.506297][T30585] do_syscall_64+0x37/0x70 [ 2452.510719][T30585] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2452.516619][T30585] [ 2452.518947][T30585] read to 0xffff888138227a50 of 4 bytes by task 30585 on cpu 1: [ 2452.526573][T30585] io_uring_poll+0xc5/0x150 [ 2452.531059][T30585] io_poll_check_events+0x1ee/0x4f0 [ 2452.536242][T30585] io_poll_task_func+0x31/0x280 [ 2452.541091][T30585] tctx_task_work+0x8d0/0xc10 [ 2452.545756][T30585] task_work_run+0x8e/0x110 [ 2452.550244][T30585] get_signal+0xeca/0x1020 [ 2452.554642][T30585] arch_do_signal_or_restart+0x87/0x2d0 [ 2452.560173][T30585] exit_to_user_mode_loop+0x78/0x130 [ 2452.565441][T30585] syscall_exit_to_user_mode+0x6a/0x90 [ 2452.570878][T30585] do_syscall_64+0x37/0x70 [ 2452.575278][T30585] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2452.581153][T30585] [ 2452.583457][T30585] value changed: 0x00001c51 -> 0x00001c52 [ 2452.589155][T30585] [ 2452.591457][T30585] Reported by Kernel Concurrency Sanitizer on: [ 2452.597599][T30585] CPU: 1 PID: 30585 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-01583-g7d0d3fa7339e-dirty #0 [ 2452.608253][T30585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2452.618300][T30585] ================================================================== 08:25:09 executing program 4: socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1d0a, 0xa3d4, 0x1, &(0x7f0000000040)={[0xffffffffffffffef]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:09 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r3, &(0x7f00000001c0)="cfa9580be18a640a08c60f39f2e8ace7", 0x10, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @loopback, 0xb3}, 0x1c) (async, rerun: 64) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400004, 0x9) 08:25:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25100000000c0006000000000000000000080003001ae350b3f077342936a7a24b434d21da7b69c5d4d11acce5e8d6ee571f71a217f163d30edea9658bf37bf2f0195b0557a724d75d8d694646d54b48ba4304cf8d626ba87087ad92566858ea4a154f6d42f52dc71349367f7cd46c62af4fd0e9e306c0e3c834f10ab15ea307", @ANYRES32=0x0, @ANYBLOB="050010ab2639a7bfbff294db5d00030000000c00b52ab338761da09b394fd60cd0f63d8122fc3ff5ebf152f7f5fd568cd7dd2ec11683133a352884ab19bc1a4dbdfcde946b43e2cd5de53171142bd2ded2d2764550bd845d9d77aa87d1d671f994bb29fe2b8c7701471d0de15340c73ea3272f30b6df3916e19a9921ad9d73b55488fce29b904fc12fbedc8c2c77b82c0d82964b037777425db15f82eed5e22d713dc61b4db0a23c82bc3f341b6a108423f4344939b6ce9d83a23f03b26615ff554e10694631e233389d6f2706f664dccee6fe05d09355de1a956935aaa32aff4dd67b8a6775ef4c"], 0x3c}}, 0x44841) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ed3000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x10000000) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7fff, 0x7}, 0xa25b) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f00007fd000/0x3000)=nil, 0x3000, 0x800002, 0x10010, r5, 0x10000000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) syz_io_uring_submit(0x0, r9, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={r10, r11+10000000}, 0x1, 0x1, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000780)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "f91aad064dbe41"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001780)={r12, 0xf3de}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r2, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x5) mmap(&(0x7f0000502000/0xc000)=nil, 0xc000, 0x1000000, 0x12, r1, 0x87108000) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) 08:25:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00"/84, 0x54, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:25:09 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) (async) socket(0x29, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:09 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 08:25:09 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) poll(0x0, 0x0, 0x0) (async, rerun: 32) socket(0x29, 0x1, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async, rerun: 32) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:09 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0xff2b, 0x0, 0xfffffffc, 0x2f1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x64}, {0x4c}, {0x6, 0x0, 0x0, 0xbeff}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25100000000c0006000000000000000000080003001ae350b3f077342936a7a24b434d21da7b69c5d4d11acce5e8d6ee571f71a217f163d30edea9658bf37bf2f0195b0557a724d75d8d694646d54b48ba4304cf8d626ba87087ad92566858ea4a154f6d42f52dc71349367f7cd46c62af4fd0e9e306c0e3c834f10ab15ea307", @ANYRES32=0x0, @ANYBLOB="050010ab2639a7bfbff294db5d00030000000c00b52ab338761da09b394fd60cd0f63d8122fc3ff5ebf152f7f5fd568cd7dd2ec11683133a352884ab19bc1a4dbdfcde946b43e2cd5de53171142bd2ded2d2764550bd845d9d77aa87d1d671f994bb29fe2b8c7701471d0de15340c73ea3272f30b6df3916e19a9921ad9d73b55488fce29b904fc12fbedc8c2c77b82c0d82964b037777425db15f82eed5e22d713dc61b4db0a23c82bc3f341b6a108423f4344939b6ce9d83a23f03b26615ff554e10694631e233389d6f2706f664dccee6fe05d09355de1a956935aaa32aff4dd67b8a6775ef4c"], 0x3c}}, 0x44841) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ed3000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x10000000) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7fff, 0x7}, 0xa25b) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f00007fd000/0x3000)=nil, 0x3000, 0x800002, 0x10010, r5, 0x10000000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) syz_io_uring_submit(0x0, r9, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={r10, r11+10000000}, 0x1, 0x1, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000780)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "f91aad064dbe41"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001780)={r12, 0xf3de}) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r2, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x5) mmap(&(0x7f0000502000/0xc000)=nil, 0xc000, 0x1000000, 0x12, r1, 0x87108000) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25100000000c0006000000000000000000080003001ae350b3f077342936a7a24b434d21da7b69c5d4d11acce5e8d6ee571f71a217f163d30edea9658bf37bf2f0195b0557a724d75d8d694646d54b48ba4304cf8d626ba87087ad92566858ea4a154f6d42f52dc71349367f7cd46c62af4fd0e9e306c0e3c834f10ab15ea307", @ANYRES32=0x0, @ANYBLOB="050010ab2639a7bfbff294db5d00030000000c00b52ab338761da09b394fd60cd0f63d8122fc3ff5ebf152f7f5fd568cd7dd2ec11683133a352884ab19bc1a4dbdfcde946b43e2cd5de53171142bd2ded2d2764550bd845d9d77aa87d1d671f994bb29fe2b8c7701471d0de15340c73ea3272f30b6df3916e19a9921ad9d73b55488fce29b904fc12fbedc8c2c77b82c0d82964b037777425db15f82eed5e22d713dc61b4db0a23c82bc3f341b6a108423f4344939b6ce9d83a23f03b26615ff554e10694631e233389d6f2706f664dccee6fe05d09355de1a956935aaa32aff4dd67b8a6775ef4c"], 0x3c}}, 0x44841) (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) mmap$IORING_OFF_SQES(&(0x7f0000ed3000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x10000000) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7fff, 0x7}, 0xa25b) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00007fd000/0x3000)=nil, 0x3000, 0x800002, 0x10010, r5, 0x10000000) (async) clock_gettime(0x0, &(0x7f0000000340)) (async) syz_io_uring_submit(0x0, r9, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={r10, r11+10000000}, 0x1, 0x1, 0x1}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000780)={0x2, [], 0x80, "f91aad064dbe41"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001780)={r12, 0xf3de}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(r2, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x5) (async) mmap(&(0x7f0000502000/0xc000)=nil, 0xc000, 0x1000000, 0x12, r1, 0x87108000) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) (async) 08:25:09 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @remote, 0x2}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r3, &(0x7f00000001c0)="cfa9580be18a640a08c60f39f2e8ace7", 0x10, 0x0, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @loopback, 0xb3}, 0x1c) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async, rerun: 64) splice(r0, 0x0, r2, 0x0, 0x400004, 0x9) (rerun: 64) [ 2453.373783][T30659] loop1: detected capacity change from 0 to 140 [ 2453.385839][T30659] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (41408!=39978) [ 2453.395550][T30659] EXT4-fs (loop1): group descriptors corrupted! 08:25:09 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300)="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", 0x1cf, 0x850, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:25:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00"/84, 0x54, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2453.517930][T30709] loop1: detected capacity change from 0 to 140 [ 2453.546604][T30709] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (41408!=39978) [ 2453.556278][T30709] EXT4-fs (loop1): group descriptors corrupted! 08:25:11 executing program 4: socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x1d0a, 0xa3d4, 0x1, &(0x7f0000000040)={[0xffffffffffffffef]}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25100000000c0006000000000000000000080003001ae350b3f077342936a7a24b434d21da7b69c5d4d11acce5e8d6ee571f71a217f163d30edea9658bf37bf2f0195b0557a724d75d8d694646d54b48ba4304cf8d626ba87087ad92566858ea4a154f6d42f52dc71349367f7cd46c62af4fd0e9e306c0e3c834f10ab15ea307", @ANYRES32=0x0, @ANYBLOB="050010ab2639a7bfbff294db5d00030000000c00b52ab338761da09b394fd60cd0f63d8122fc3ff5ebf152f7f5fd568cd7dd2ec11683133a352884ab19bc1a4dbdfcde946b43e2cd5de53171142bd2ded2d2764550bd845d9d77aa87d1d671f994bb29fe2b8c7701471d0de15340c73ea3272f30b6df3916e19a9921ad9d73b55488fce29b904fc12fbedc8c2c77b82c0d82964b037777425db15f82eed5e22d713dc61b4db0a23c82bc3f341b6a108423f4344939b6ce9d83a23f03b26615ff554e10694631e233389d6f2706f664dccee6fe05d09355de1a956935aaa32aff4dd67b8a6775ef4c"], 0x3c}}, 0x44841) (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ed3000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x10000000) (async) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7fff, 0x7}, 0xa25b) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f00007fd000/0x3000)=nil, 0x3000, 0x800002, 0x10010, r5, 0x10000000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) syz_io_uring_submit(0x0, r9, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={r10, r11+10000000}, 0x1, 0x1, 0x1}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000780)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "f91aad064dbe41"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001780)={r12, 0xf3de}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r2, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x5) (async, rerun: 32) mmap(&(0x7f0000502000/0xc000)=nil, 0xc000, 0x1000000, 0x12, r1, 0x87108000) (async, rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) 08:25:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00"/84, 0x54, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) 08:25:11 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') write$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 08:25:11 executing program 3: sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0xff2b, 0x0, 0xfffffffc, 0x2f1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x64}, {0x4c}, {0x6, 0x0, 0x0, 0xbeff}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) poll(0x0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) pipe(&(0x7f0000003400)) (async) fcntl$setstatus(r0, 0x4, 0x2800) (async) write$eventfd(r0, &(0x7f0000000240), 0xffffff14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0xff2b, 0x0, 0xfffffffc, 0x2f1}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x64}, {0x4c}, {0x6, 0x0, 0x0, 0xbeff}]}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:25:11 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300)="1ba0000016001d0d89fdc5cbdd04579870ff000000000000000f8efdce705166d164dbfc8bb7f01ced7474a73a932b821df794c232499677c000ae868ed7671178ceeb3ab361a7b97b3b5a88c35be7e1d5af8e64ef50b8201513edd6ec6e00a7aeccf4f2136dbb55061fad62d9996aa02160180601dd97a1b0b5f2fcfddda2d580732ac7f37ab81a3c38cbcc491a999cec660752601e16b95e1a96b585636a20bad6b964e46ad1f6df1d48ce1fc821a99cd179d199c37ec9dfb6b5d3c8717792938a76b1f7540e033efede7cc3040cf6eb236963533b97a665fb6eb206b89c438662b350c360a36fc2ffdaf08e1eeff796aeaa2404b9ad12325942dc934d14271abc3a9456108d55ecd3a4b21d284e3c794392aebebd8f7b3afc61b2996c26ea2e86ea8a7b78655355725e8db2819712a449087b501f4f33733ede15ded8234602981fd5b6c8e88bbcd2915ecbb65d210d671160bffdb967500471576939e00e60b2aab394722e116113129e17b448b925275f9b0b9e14d74520136868f2f9200c64e2b2eda5380fb8dc729e5b3289477f1348065f2c84a0fdbeb26880ce6eea411210cb1f7745a7d76a459f4a206be6b257a0e8c37b96f5fb1ac871c327dfa473c41a829d297354dffec44cab80dc", 0x1cf, 0x850, 0x0, 0x0) (async) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:25:11 executing program 5: r0 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd=r0, 0x1, &(0x7f0000000240)="fcc3af18506f5fe24f55feb18ab719a5a07575e4b9354a7a43fef2e313ecb588c2a1d85157e3f422c217e1064eabde5b430bfae80f9337e41052feeb049f6a45f8de6887e25b15fea30bec08ba06f62c5cc07fb7595a490cdae41533eb37abc1e9df560fa1092c6d10e9d5a08f711c7d484997128a32c439c1b12a266e62068279810b266878e42097dd752b36122fbb709bce65150802f6cc27f58d32f510049433951db765b2122c62538ed7359b2ade201ea2a609e13ee7adf55e63e8", 0xbe, 0x7, 0x0, {0x0, r6}}, 0x9) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 2454.969330][T30725] loop1: detected capacity change from 0 to 140 [ 2455.005602][T30725] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (41408!=39978) 08:25:11 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300)="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", 0x1cf, 0x850, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 08:25:11 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00007fb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x3, 0x8}, {0x7, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000a42000/0x3000)=nil, 0x3000, 0x9, 0x110, r0, 0x10000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:11 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x53}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x2800) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x1404, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) [ 2455.015248][T30725] EXT4-fs (loop1): group descriptors corrupted! 08:25:11 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00007fb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x3, 0x8}, {0x7, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000a42000/0x3000)=nil, 0x3000, 0x9, 0x110, r0, 0x10000000) (async) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8}, 0x0, {0x0, r7}}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) 08:25:11 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00007fb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x3, 0x8}, {0x7, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000a42000/0x3000)=nil, 0x3000, 0x9, 0x110, r0, 0x10000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8}, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x2, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) syz_io_uring_setup(0x4292, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00007fb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x3, 0x8}, {0x7, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000a42000/0x3000)=nil, 0x3000, 0x9, 0x110, r0, 0x10000000) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8}, 0x0, {0x0, r7}}, 0x0) (async) io_uring_enter(r1, 0x6019, 0x0, 0x0, 0x0, 0x0) (async) 08:25:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ec", 0x5a, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f", 0x9e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@nodiscard}, {@abort}, {@jqfmt_vfsv1}]}) [ 2455.126886][T30759] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2455.159841][T30763] loop1: detected capacity change from 0 to 140 [ 2455.199451][T30763] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (61830!=39978) [ 2455.209079][T30763] EXT4-fs (loop1): group descriptors corrupted! 08:25:11 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4292, &(0x7f00000000c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) pipe(&(0x7f0000003400)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r5, 0x0, 0x88000cc, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6d}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a5514e5}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b3b45a1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x8be0, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1578, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "14cbecd6a1114c50a1854a413bf4966026eee4d9b7cb4f386eb25c117b77dc9948498cbd27ae9da9ec57662b1322f5ce1f57ca8d8215d5a4a2c4e68d733028c6c3dc8e7c01a504a2647909753bbdfc01c14bad781d6d65ccbe4b1956ee4162a9aff4f15073c31a96269482ca"}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "3abee431fd33dc028181abff01126452c3b49d440d49d8f494301b9b70a1da2a747baa063e195cc3356fda6e34e2460397b4fcef964a49cd8980053bff1f0dd5bf282c2495a7348506b69232b375cf9b712b02f63c5d9649cfd64608589830ccf0d0153cc0398ea8c7587764c34aa085a5a12a429433a60227a911876c676b97aeb30929124f895e8517344398816d97665ecbb0b345a59bbde28dd25825b034e82e133af958fd6a7a7979c76cbcfc1795e8bf6ec681cdc69e79f6bb244f9d2419ec"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xafeb}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb, 0x1, "964eb075974f77"}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "5ca158cae0d9d7ee6b95cf7598a9d55960f4df84e0ef265a5080ee209d37af8891648075a288f0d50fea752c0847da3522acf27c11bac49bf05ef10da41034a8a629853570188e08445c8f170c174f67c21e32f1583b84ea0d821699fcec0e4e97a9e3d27288a376c4edc57767c25c87447241a0304b8de88ea73b77200c9e51efd6e2b6a0c6c6b4996fdf4a57d0b0bfd32585f36602348ab4dfca87bc52c3b8385056705e155781b6"}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, {0x129c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x108c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY_END={0x208, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "943bd571eb0c028b4e310a0ae64d2c7ff5719af8466a1847eb820ee990b367ebc38ca27b5a41df4331aa21b8e0c51aeb37f56daf3ac38319"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x51e8}]}, @NFTA_DATA_VALUE={0x6, 0x1, "a35a"}, @NFTA_DATA_VALUE={0x33, 0x1, "351ee6dc439e032ca0c45198797f04ca4221e8199981d2ed3f121f26a903f7d1a991827f3ae701e59308d72a7903a4"}, @NFTA_DATA_VALUE={0x9d, 0x1, "aaeb7a229317fa82ef240a50615b50e2e244b393f6c86edc38e70994a674f84dcd8024e5e90fc523d310999cb3c89d5b73f697d6af4b27518450df40060f23cc25e708e2fda99aca8bddae5e8d7c77aaa56c17831e646182d15cff88f0fb0c1b8d824f5ffbda9a1da0a37e4fb2e173ef0a5493fd8b0e6105bc667e8e48a4bfc285ea2c00cfecc49145cc4d0a03c8d50aa33a937a954d69a779"}, @NFTA_DATA_VALUE={0xbd, 0x1, "89faace12faee2f6aded3ae3082282325567b057431b8983f5303333335083270f633eb9c411642e10e8362727fea49f7bf597a68d28c0b882680a589c6e7a56b15e85f2895c40af14c778046d9eecbe87b7625c7ba19379b01ac10aee9cb97aa7fe03df15e9b2bc8883c941466dfc3183eda0131913e1f072145ce42849ca3ed49567d2a988f75c0472f29722b89cf373e6d5d750f9a9d15f81538b6a4631f26f2ab6cc53dfa28ab26c062e310839112cf5b3c31e6b6548fb"}, @NFTA_DATA_VALUE={0x1f, 0x1, "cca6924c26ed2da1757109c3506bd6d302017a701976b2f5c73747"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x72d0, 0x3, 0x0, 0x1, [{0x10a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1094, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xc19}]}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "cd30a5cd646f5b6731b872cb89462cea190b9e22b6d323f5fa4e6a7f7ae37fac4b673d"}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x3f, 0x6, 0x1, 0x0, "a3aa94b0eab7801f702b53dbc1e99b8062ca410700a7251bf60ac1578d95c5cf7bb7869d6ae6dbb1636b2e5d15091521e5bbf29905f350aa9bca8a"}]}, {0x1214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x202b244}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x63}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x7, 0x1, '\\\'\x00'}]}}}]}, @NFTA_SET_ELEM_DATA={0x10c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "6c9ca4176d26abf6391bd5a5be21bb6ce06be3aae98a0c6ee25a6329ca94d279d9dc8295e5f6214571af096a709ccbf934d5ae90d5236ac94fdab5dfdf0eaf77b93419d618df70d43590faedcd04ee83fcfbf1009091b83e109a359f3df9478f3228b3012fc62c8295a1e8067ae37f84a5907214c794b13501b3bc9c7450d2f5401cfee0a93e57d042c65cea88c55a0256fccdde59374a1a1906f068c73c34cbef7b8dc3326446572abfd6509e192772790418a8313ace"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "8daa85a3edd30e820854a2acc55cb403f8b3ab406c4746f38e9de0f6eb210f2355c9874a8865216ae22b1251d4bba9617f54e2d67e1f92860811d1ab712d51e167981ba6fb30fe466f5b598598b84ea33cfebfaccdc05e3f60cc61fe510d732edd6d0d060b8d643a1c843d28948a9e92e90cc8ac82dbb22f27560c0db4fa0c2ecb229e4735944aa4ac18fd1838fa42b1a765f2bfe352cecb2f356d8d98d85ec168e3a6eafc9da5acc4"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xb0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x91, 0x3, "0c59059807968374ca1602c40fd6668065da3894c48bb6a15da3595b08789dbe43741aa7e3d5e6dc11df584686e3b833c05e83d1dec61bf927bde1d5e5d13f68811e7a51c1ff4ab25a65f331fc0a27c92cc1267921c34195299674ca171c64b5d44a0b51d463c894528dde55b25b5360f21f01e72d30e5f82676590fb376630823099af3bc4ceec7dfbc910a79"}, @NFTA_MATCH_NAME={0x6, 0x1, '{\x00'}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "2bb48831bb7f10161742ca56e3a3d317fbb124cf0be64fd0cba4b3b2c1b8f2a4da26133a4ca45d3406410c95288c8b98ff76c55c3a5de65416ff5380fa9c9229d931ea30cb81b8d86d5b31a4ad8ac53880243505408c64a4b96bd7abd0e0f681c21b74ac7d7e43c5a0683532ffbdd11a7119da3230fd38cc1f0e30e62df83357d752e6ddd3edc742b6186e8e08a0bdf19c9881faad0748707d64e85b46b1623cb035bd9b6f1a206f25118b359aab222605e10b77c3eebb"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "03407c64bfb27c2c89ee3b5793a43d35db49112a44c73450ad942236237690944f668abec0cb755be2d5c5b967c1559612cb317be67d31962204c1"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}, {0x1280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'mountinfo\x00'}, @NFTA_TARGET_NAME={0xe, 0x1, 'mountinfo\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "e258f1af8754521bfc7d0cc501777172a89f0edf50b562696d42754bf45ce4b9189d167ed1af43c8e4ba4fee857c0bf1a8d5f531a7fa2b27cace143e582159103d2d9bd65363a4f062d766f1a53b7383a9279d82aad153eb86d061386e43afef13ffed526a11201fc0a3179506fbc765abf3e881c00b03ab7c1a2a4f10cf844fa36c31b04aa0a67373cf102bde35a04e88dd04a382dba686746b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1104, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}, @NFTA_DATA_VALUE={0x72, 0x1, "a126568618906f826af0a04e3b00f435f8708c826dd4e565c1d826d160c7feb7d84d23e84ebc9e2429ebf8aea024edd416a98554367fdb59cdee51711b01ea2005dd5c96bb1a6e6feeb34839a5d6904f3fa7a90b2a386a58baccf3629a2156e7f714d54f42999ebed0f0aac75f41"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5e, 0x1, "6dd7b2ad92215c4c73d3cbd3ab3189b90337b0e61906b1c22d54e33139e36aa30ab0e65cdc1baa573c591af0e4872bb694a37dfea95cbb35550727eb97b671523937af7562eb4c300026c6a6925c2c72dc7318273bfc16b231e9"}]}]}, {0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xdb}, @NFTA_SET_ELEM_KEY_END={0x324, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x98, 0x1, "8320438912ebe20703d0693785dbac5afd26897c790331ff281d5cd9516bebf207381689b54feedec56834cbc81534b75253bc9e1f8bb6ea5ae118eb7bcc12ae091ba6fe20b933c3a51574ffa299d7afa4cec2bf9d1ebd3bdd8362f27540722cd99891009a5d43f172b9f569f16d1e326f13bc9dc64d95bc7b45d4ab39dbf73e5c8b822082de4e22ec960ab4b174b1ed8e75ba6d"}, @NFTA_DATA_VALUE={0x45, 0x1, "f8ecd4b5c7f041f58bf009e66984fc5571e00b3f7b829be7bdf721768789badb7c49998299f685966193a09de2e377919a554c514f796fdc79500c0de40c63a1e6"}, @NFTA_DATA_VALUE={0x5f, 0x1, "b93e18e5caa28689aa0251bce07e9a70f162f1178e897b768d7d5475fc807b37e17790441b9fb40f594d551ab3e2179195d4254b6be4f46da86623a52e4b6abed42521c04e5223bf2965a666ac6564abfae607d349e386af87b62f"}, @NFTA_DATA_VALUE={0xa7, 0x1, "d31c4886792e38eb15f0812079e313f7ecc26432f3e8757be73a8587b22557356175d2877c5def4c408baf7a37c65df7c4e9046c6709cc7d77435220e55a607457cf78b82ef545762360e58234510285cd9563efe731a8d781a8d800b9efd84469dfd37c7908718d439017c873a09f1fe5e3b3ab41d65bae030402688bef5667bb6929aa308ac06bc1954f4b45c74a68c89b770b41ed935ded7671f6a88cd38acd5dd7"}, @NFTA_DATA_VALUE={0xa3, 0x1, "8f81da97778c83a5d6ce571cdbbe3920643d09107ec03797f44d430165ef8fb4b9508caeb165fbb3f17fbb01962f3519749e916ca7fdb26765bae743fe9caee167415eee69d2077f37b4b696e321b7a76041af64f22bc763ae110549d008255bb04bd543b6d90b14e9a4efbc0f4045dc693aeeb5fc045680ffae4739f7b9deb26d1532e1af4be0b1db780486a47a4b2591f79a6c3ffe73817a39f24b2d7100"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10000000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "f572209afa03120482b7bf66abd09416fb714789a252cd88"}]}, @NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "e437028df871e3631315baa8cc734449cad96d1874aebd38dc183130192ba4b88bab66"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x58, 0x1, "8f629f7828ca8b66c5ed0adb84760274739ff4a69f82d400ca63e44a22111f6402573d208d23096340bf49d5e38db87a3c9a81bf5d867ad0accb517b97509c580544a4cc698e9af71d1c054692d97ccc6a933ba7"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x401}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x11d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "7bfb6f5ae27c3ae5b4ac22f3f5fc7da5998c282062ec3a61f7d7060446ea9fa312bc7b6b6ccbed5d6b85a3fd39e33cb8e969f853fb2759fe0e37c734351b942fa7e21222e858639b608d270201289982b1cd9c1161055fd1"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff00}]}, @NFTA_DATA_VALUE={0x61, 0x1, "5a7cb6764a411c1407dbd4028302388889c403f9f93f36b4ae91d856818743b68aca6ea703a9b728bfad49fe7440333ba24e2ae09d938c590ced812110d87c43f36a41baef6add4bbae49e20505689d274a3e09bb65819305b3a3907ba"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x23e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc8, 0x6, 0x1, 0x0, "e52549a3b9e295ba539ad760343651a73b1bf8eef2f70389eb1c1d461b2652733bb7d3aa02a3d51befad7d6208b662291c2771c858961bbcd2c9c9970e1dce399ff03421d9ce42182bcae9c030997d66975520010934645d9471af560af59e70b15a1d60e3e6898939f763d251abe7a72d06c7256ede3cb85906cbc909fbcab685760138717a9301aa62fc34c31c8032889099e4aef8d4b8ab595e9328c9f722bdf2110be6ab223d723e1e276d85fcb597b0b1e13ab6fbe538615aac2c266cee65289c12"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "d147751e937838557713ab276fffdd4f7e39444d2850a8fc7aece617e5df67e8d9e09716d34922a6d17c84fc757a9d4126658612703d28fab6b650e6a0a96b3a77f2d770247dd33ebac7452688392d26504d78c1871de3f19a84ec0cf6f1f119e55e70599025116ae95c8f423fe18dcebdb1d78e7a82ca5ec4d6d6f23d4b075a8362bd54062c492a3228c5feb904374fa727d0b7accc90782eea2c3694245d60ea9d4f5632158ddbf549db7375ae7dbf"}, @NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "1a86d98a26c4714bdcfb51d8ed61149b651b8d0fd7868ace5cf1b96a4531e783a1ac474b8266cc9bc00a5f107a84f91109b9d68fa6f710440248badf3a1ebd4714fa242b96a53d1dd815a341d4d5c5021fa9b00bab477e091cf0825762e020fe2ab7981e510e81892e13ee9b5962f2fe7241d871c7333caa298747ff1266807d3cf54333b6f9ab6869d6269fbc9f0e4434329bbb1887eec03d181c11efdd8d7e6084d00019b1f22947aab1bbd3ca13ac9e815e67ed67cf6004bfb93f04af7796925873f79be777d6569b6ce2d28e50c3d2f02efde6bb2e7cfe2213d672bfcd83a121c3b9fcf600166ee8b8c77dc42fda3bd7444e0d0b6bbc37713a0bfb0f09071b993d7192623c8cb65b4da2791180dd57e43c5e0127fce2c670fdfc3bea96d7b8e54e16a0716a39c631aa64c3a4c4104d99ce053d9372b347e347d24e98ac6697066f6e3f57d84afafe2ef24095cae96d81e9895332b8bf6b676cc08a73598d6b6b6c5ea3edf85050910e16d09b369812d6de071e2e5effc2726117eb015e6dea5959bd502e1b158ac19e1a49350d52fac0f1b9ae533bd1ceefe996dde59ac4fb84183b6583c165b31589418ec21c4746a6ab583a46d84376c06c39d9b7bcae318a8d5459df81b4be74194964151a61f2219ab2d828b634882d2ae6649ced159aa8e26b48ed16b2dfbb771a02bbe900ac671f7cbd3346a83e3e9f65940e3c5ec4670ed8736a6c565a87c86c2089eaff51f60db2201022bc3cc663115b2ec6a2d1b5dbc36ca457dcdd7118d3098ef23934d98b2415adabef94fa3dbf3d93e9fee3ea4cbc1116e45a6418e6f30904085efddb910a855e2ff7de437174aa14f2e56f470c0f4ec57e95babd3f59229f0ebea9f97b44e42ebc54410afc5447b81ed7445a21616deaca1f0a2282db9be5136827c1e8ffb561721e5e45a0d939067c224d1eec875feb7114e77230be6ba2e7b96dab8fc483e48dde56366cec21afc146fedec5fc67bbcf0656655bc59bccb52fef09fb5587958aaa3c06732cb0e5935756365550ac84911f0baecde68673e121483564faf337ae54cbfccd66f78f3a4a847c67382eb05d8d52effa722fa7bbdadf23cefc4042ca701613c6cc1c981f7c57c4eea99998e77857a8a8359facf19992ffb3c17f9a2155fff1478b92d612945af893881a16c419d74dc1bb836d6d24d528385ac77dd21ccc9f24e203130c23f73a4d246cc1eae5522ce6eb852af249c9aca50d374aa74405b7b97b44b876c6a4f80f1bb54f678386ec6ec0f80bc96b71135f5ef4df9e110251f4d074474cab6e963028578eab6d1c8c38e16f03f0eaa337a840b918aadd7b5332bb31c5305224da0a33b17c34de70654c3d875748d31ddde5e32bc5bb9278b87c47c7fa39a08848c74c83a3aa146cdb20bc61bd378d1848ef03a4e7565f0ef445aacb2038dca56171ca7eb49d6169553d5c2914d780f130d5a17f06f3d44ebe28d329ec56ec656d7727dcc1f789e42f5d2ae237f9129df177c6d24fcc6fa5818f0dd28dc28c41746bfcaf954c0011760b4a477cd6bffb797451bb61bf035876b255cac0cb328ce400abc534d32ca3940b446bed125d1a05ed6e348e7e27abb63d41194cccc4ffa46f12b28e2785b51e8ac20937f1aba0301c25c9603efc7dc4abac53e109ac55bdcf7074d93a022ae945fdd57da54987ffa0b58686858ab08e00e2f661e86031b046f60538ad659abbad545a4084da4b9f1eef616ed076e86cb994f5a62f8d2d3e3f53cef5e4c5b4fb94182ddb62606171487caef6c2085a0db459c3dedf85ac04cf4eef16fb3dd23fb2b14db2d9a6883525f5ae0b93f497d6415f0bea5bd65eb62c3c5d4e0d4a39aa84c39fdf1b45f661c2ffbd666c348f585b0d0f758e5048f242234b636fd81e72681581b3ae0ac1a66f5e335ee917fcdedc03da81c65b3c63b2a30119ef11f252e9e1fd859baa555ae141ee8fa4e940696128dd8a6a692208ae87061c07d6cf54ecddee0be55fc4b266eeacd3e42676fca91c991bcb4ca334b8373c8e7a16493e7f2f19c106dfd48e1797ee46f606a14ecb4811e1a19d84d4240d77716bd7b6967a860de8aab20cd7be7e41ad7cb31c5336f10cd10628d25abbd43fc8f15763562cb1a0be12a0a08d9c34336c07e717a9cc095f7986d0f792999f0a5963df9592ef245db4c883bc5544896699f3779104fbe4777d05fe809368d671e3ea0359e413c9b654bd78b44499580218e18602b6f14cbdd97fa48ebeae45a3687bd90fb015bccb4702a69838f6e60ba1c37dcd641d3436b990546b3271ee13d1c0536d3a3b0617b102b78b110431a9f4ed3dd01b2513ce53720117cd82be03e61989189d94435fd69d085a9acf80d7d38bac585f62be6ab09827d32fae1684f9d3f59c8247f19970dbc7c518857499fb91d28dfb9449f0e5f492c4d53adccbc172999bad933636233fbba37142599cf598178ef4d894d2daacaa567ce9700c683231d1a6163f29fe7da759ef7f85357ec56f1b0e038093aa6b685d70fd110d6d6f31d05ca7a18605c20ed097471f258fe4146e9675e5854514fa34034b49c114ff8e323f585624fb57519e9e82ca45425ad27012780970e5e1ebb6f398674ee7de958197ce1f271f3ae115d63a5c3c6570d5e6c409d99aabccafaa6887e5fc06df96bd80156ae7105f198a902720faa7c55829ae9946f07287616eb84e6280b73f26e754dfc5f2e9996863dacd40246f1aa9e273aba3b8ed27e6fb9dbd1ae446abaa1fc075e37119ba59ce438ee2746e11d0d4798621725fcb172a77bb868d880c842476dd91ce8b8f4aeda617286c70aab303fcd670c1a18c62c451f94975a3cb676b7ad2c6a0b839715cbd6a9643f18ea92e7bc3af5bf44a20db1127bc13af940eae9a3e1c42998a40f67508ec57047411809ba5b88328a346e2f4a4be9190679babe81c82ce30f821d1f2818df63dc71be2683165282b242aac5973c1933799bd299cc419c8828682785227cbd455cef53f4da02e98aef03173ae7545b6a0450667d5e8668d632f8904eff2ee7ff07e709ab9648ce7ec0edfacf3679903e4aa1f3c3d78509aaeea3ca50711517a613d42dcd9a09d9f718d2726112070a89f482a59f73077ebbb94c01ef284c8bba8c4790e3df4ab9d026d258c3f31a2b434c17e0b0f7f9dd2751757282fa9657b7ac5dda04a89abe4408da71870641a0f86f9c350983f35475eaae7fc93d2d01c005024c7ce383c7738df0da00bd3ee8f17e62b2c756d5c2036bc10386185c0b7a582210a42e42f01372c4e163052d4adca9d10bf13d1dbdcc2e346b8254d40b429a8f58f847cee5d7bda4e9dbb638df5296f99c2f8a85a63a5d27d192bdea83f58a6b4cc2d1d57c334eae3f27663353944879e52e6ef26345bbcc0c8bbce9bd49bb4b39cdcbb6eaca25e638c5039b3027e7eb0aff30f88883f3dad7e2ebdacdb5eb71a31b547e8357c99a12f3d6f5f3858f7bfd9aaf8c8bdd953a3fd616e5cd519752fef63d1cb22b86a3f28a5d781cf9a3e81f924a7dbbbfc1bf7b6b45f2b497a8ceb2da45670105ad685107791291cbba0ac317f107c957da9f081e5b088892a30db37fc3cf8236e44a585b9adb716c8ab6fe43cb1aa563191ad502fee475da1e8bba4b296e0bcec4de687f3e71348c32aa798e7d3b2ba918119f42d59bf44587da10d9583927d6925a798b16ec2e38091146f614b1ca796ec370c0751a77f84d29d1586a8034faec5ae8f41e7f258d467544f0b495ff04d74e159fb62bb39ae550739f79f724ed7a29fb46d795f2c3c36609bb85f899ea5c330560ddd2ff1c9996018e15837b3ac69e906f2f050e4741be1b7f5ce0f6bbcfe12f3560844b4064e360c79d99177ad0bc65273a625fc1a1fdd04d7ca5e2e51416f2e1a9356714d0bd93b5db08fc8cadcc7eb1d4d6310f499c929a5f4f11ffb967b8d21c80c8a59fd7d85d21dafed23a5d001a1555828d25489d3677327b3b72e639809826960db41b9acd9e74eacc4571ded82d1a27c1e1ff3cb24506955d44376163158638d0da0caf12293b8f34738998a584768463e1cce394dcacbf02750213b6b828bc334a458e2a89ec25586a38d43dff6e1bf65b0fe1382e3c83a0bbefe0f14019f97daf67196333a4b971c9c8b11acd01086d7be141a0ad37b35321e5bc502ae2e89d432c6e418a7bc0478f360ebb99bd35961635c59c13bbcdc862a8315e59a30a88a29e80ed54c9243559ff188578b42883ba4a01cfca00ded336dd481200e7bc0b1cdbbbabf4577008cb4cdc067ce96d5f0fdbbcc4ae639ce06775bf6a8ca29c1c70fca7e708e2a6eb99cc6b9fd8100658118d6287e9bda8941c6a23270fd2b719d0144eda43295df1ef657096f8a51039f5d3ade54b5a34bc7bc0ed24cad1b1d090a4c98229560c42b5a54eea85a741f2ebad24a029e28369d37ba7e3ae1d193761a53ca7545ee3935cdd6dbe82299536ea389949452f5f4e634f4bc31275382a72155b0a9629fb488f146f1f7284a63c2818e596ae6f5dd183691b86b6c15680378cbaa9e9d50e45adab70c34c492ae1ae8a1282f344e53f1b000683c601a582bff78e202c48a6ba234b9c4fdd7f20510df78f358343de0b836f9edea13c5f0de43de98bc6fefe48fd32241fb803ab7f71169741949e41cc4bd0bda9e97c0606e51169c258299e537f07e4de7f8ae9ddda8c6c04d7ff9e66ccb901cc2423607b3b82550010f128794081816d896fa45907b061bb70361e6208e24729dc6fb9e0e7898988fe37d6e278fa72b1fb0bd0fb6d233f28d14b45c5ba7e876b6b4e5ce1cab40a568b18c4bdb6e395bd4930aa4e800eeba3d9df9a5689865df5d518274952850627ce3feb94c0421778ed4a472a19bed790113b874f8fe08774a5bb558048d73b0ec23da3c16b2c0ea00d4b25384d2b21875698d77357c15228ebf88c65372cb4ac6f289d5f77ef3df5f1e2080082a12fbc5caff9529a043cec69c6fccfb8176ab2da3cc5a7c4348a6bdfa999caef25de86b37a42103ea9824ef2a0a0eeabef6811bd64d5d1025a8c47671f021c3cbaad7d7e25f2010bb0663e718a139c7c6b69b0ddfc24f865e53e8a804ca72ab54d522f00efc46f5688a39245456ac134c35c6612f03ee9bed4e8c40339beb9cc944e37ec8b184e583864ff64872851e8151a381b8826df92160e5f8b71a66e7f3d4be40423bcd117ea0aa59ff04a8a62ced92ecd37c189bc0a2d469ae5521d1d006a518202ec6755ad66e25a9f1ad7dee330f0f62d7e3ce4dedb0d1bf7ae412d6d8754f14597774d031fbcbd267296ed79c285e63a3c3440b57fe442813f66adc075f9cbbe67009ec3a2407b2a0c7a25ddbbb5e657f87876f923bf61100324e89dbe1912280e5900efcb412d2639d157a9cfc85bb1bfffcbaf7cce882d824f78ce626b66a293f0d108de52590ca1c203cadac9c624d0154c97f033bda1db1183fb90fd04abf7b85804b3efb6df4a8b589ec9191dff38c1a17a985ba5e0c4ebe7dc04f0f454bc8aba6c8ec2301930a3cb3666a6518aee97463d06d48a4e6502de5419f227b9fee398a3e22282ebece1f0d43d6cd53cacfd52a94794054459523ac48a5954dba9da6c0323f9b644d64996a699588958e56561c85f61ee3b8a780b0e0c123c3be338ab6c3a365b68d968f527c4027db6035e6ae2c058ed6774f295c92dac557080c5ca9eab450c79ca81fbb3f84439b7532752b63c9f9ab2541638fd7dccf16da77858fe7dc96ab6904bfc13ac7046c5f969751f8"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x11f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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