ffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe13, 0x5, &(0x7f0000001500)=[{&(0x7f0000000240)="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", 0xfc, 0x4}, {&(0x7f0000000340)="1b7f4dd9343982020c1e23072a7fcf4b4dcc135b02f8ce0fe8c8bb9554d91a5594435ec1441ba6c5339aefefc65f8fbdd26a495cc73dadad45b95c0a2063004406e9526a912136604b51758b4d9e69dfe285b53046411e6f9fdde23fb010df75534101fe35233c70009e8b97b0c44cff4f8f40645e", 0x75, 0x5}, {&(0x7f00000003c0)="4971ee0268f0ba6911193fac40e37735be9d4301e5f0c4f51b0cf43ed285d86db51a702d4ddd4495b3f5572b6d36f02dd64a17156f4463dcefc0788934e223404b1720b596b6e75a620411b462399f5a79c0eaf0d7f1d3b94823a5aaad8b18bd2617fde8b5b8bf3c6db76c9d931b738325c6", 0x72, 0xffffffff}, {&(0x7f0000000440)="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", 0x1000, 0x7f3}, {&(0x7f0000001440)="ff939e007d67c5edd7e38f155870724f746ac64025bf447c661bea8a711ba4c7cddef1aeb8c5ccda6905dad6de5b32e9e0561ad517795af6d3ca95096f7e78d0b13c905cdeef9ee613adc80e0e4ec19c80ec8d063bfbb22a5d19937d7f4faebf6490ffadf53853416d113109001cadf20d2a69fd81a6604f35f88dada354248fdd74f813031daa5d2a1f65744f74705e090db67cb077951fa745331583ccda2ea7b8f7f2b3c0757f3a1a", 0xaa, 0x8}], 0x0, &(0x7f0000001580)={[{@noinit_itable='noinit_itable'}, {@nouid32='nouid32'}, {@bsddf='bsddf'}, {@nodiscard='nodiscard'}, {@norecovery='norecovery'}, {@nouser_xattr='nouser_xattr'}, {@bh='bh'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/full\x00'}}, {@subj_user={'subj_user', 0x3d, '#\\'}}]}) splice(r4, &(0x7f0000001600)=0x7, r1, &(0x7f0000001640)=0x100, 0x38, 0xf) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 541.394432] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 541.394432] 23:15:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000070000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:45 executing program 4 (fault-call:8 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 541.623519] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 541.623519] 23:15:45 executing program 1: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 541.765068] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 541.765068] 23:15:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000090000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 541.970367] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 541.970367] [ 542.110670] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 542.110670] 23:15:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x1006}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740), &(0x7f0000000780)=0x4) r2 = openat$full(0xffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x5, 0x12) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r6, 0x40047211, &(0x7f00000000c0)) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='lp\x00', 0x3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r6, &(0x7f0000000180)={&(0x7f0000000240)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="6acc8acdf317c376dcceae946b2222c03722e0733de14f0ebd71c79443d9ce60e9d96ed62c6fdabf2d6f937bece07d9acd448d5c0b3a5f5d2441beb1446b0550beb8cadf0a0e9605e5ecc19b787e04ecd511e375b307bd52c0cb911b9005e5410f40583073b08f1642", 0x69}, {&(0x7f0000000340)="2aaa50bff6a17863e61d806198a96f229f0f2f41a8e8f49fffbf9dbcdeff797ab908bbb169317c08ad3f7af807304dbb437244064bf27d3f7f3e418829c6d008eb27dda61c81ffee60a2a9", 0x4b}, {&(0x7f00000003c0)="44a214059ba0928c033edcbb0417c6231792dfb4e5aa44532153c70d0f0751a6750d64483140f022dbbcc390162c0efec7df65e50c01734138e59c4e558f711c59cf9e9d49debef0741fe76f1739468588a9d302d9635ff3a7becabad825f370a403c00fa6649ace0f7b3c014e0551bf7391b3eb20cdcfdac4d13dbeb98586cff4fffc6ab688f434c31181a23355976221653e5ed959c2e190cdd7f5730ee2305dd275c55b34a4e99a6a128f9c592fefbe91ad0a84d216328d1b83c88171315de23c343ddcc8f0b07def57722fe3aee763d98e44a65c230cc36e06fc3d7542faaf173766c8f40777f372b769b2914aeb", 0xf0}, {&(0x7f0000000040)}, {&(0x7f00000004c0)="b251a348be1cab987241ec2bb26e0f5e878cedadab80c3ce9baef27a5bab57325956c90570a461411cd04046288b15836fb30e6346643b54f2b4486a95b6222f83a242b69708e8da5ac03afaa53adf9e0c21aeeb20ed3c2bc889bc99b644974c4e4e3316c7320a96deda580bf5e3e4f95737d3257b2999b71bb0f7cc09385c2f7ec0e83b3481c5a4ef0ccde160ca0071932ed33ba23e5bf20156774cbaf75657e5766aee9973", 0xa6}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x120}, 0x24044854) 23:15:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000b0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 542.313592] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 542.313592] 23:15:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000200000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:46 executing program 1: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 542.611526] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 542.611526] [ 542.741232] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 542.741232] 23:15:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000230000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 543.126725] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 543.126725] 23:15:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000002c0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 543.200661] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 543.200661] [ 543.269332] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 543.269332] [ 543.331020] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 543.331020] 23:15:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000003d0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 543.753664] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 543.753664] 23:15:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000003f0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 544.006341] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 544.006341] 23:15:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 544.100530] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 544.100530] 23:15:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)={0x100, 0x1, 0x4, 0x2, 0x8, {r2, r3/1000+10000}, {0x4, 0x1, 0x1, 0x3, 0x8, 0x1f, "91cd7b7a"}, 0x401, 0x3, @userptr=0x6, 0x200, 0x0, r0}) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/253, 0xfd}], 0x4) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000600000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 544.369447] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 544.369447] 23:15:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000c0ed0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 544.786742] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 544.786742] 23:15:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fff00000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 544.898322] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 544.898322] [ 545.003630] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.003630] 23:15:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000fff0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 545.146718] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.146718] 23:15:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 545.226373] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.226373] 23:15:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000f0ff0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 545.357992] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.357992] 23:15:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000400001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 545.684019] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.684019] [ 545.798671] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.798671] 23:15:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000001000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 545.927546] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.927546] [ 545.990385] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 545.990385] 23:15:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000ffff1f00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 546.206652] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.206652] 23:15:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 546.295040] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.295040] 23:15:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 546.537368] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.537368] 23:15:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000080dfd900001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 546.801723] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.801723] [ 546.933609] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 546.933609] 23:15:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x504a4c10fd0fdc44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0x40047211, &(0x7f00000000c0)) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xc, 0x0, 0x1, 0x64, 0x6, @random="2f2c3cd1c838"}, 0x14) close(r1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000001001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 547.203038] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.203038] 23:15:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1e4, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 547.311620] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.311620] 23:15:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000002001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000380)=[{&(0x7f0000000240)="122ce3c02d705e33203e8483dd63d2756dd3326b443922e2c60c62abbed8d4ee3c06fa00bf262ef3be28a3c5d16b5c2667deb1574d75a389786a28daa1fec10a58560ede09eff07bb6983d04584178e8854cc221ee43541b677f67a01a4f5c1fbb7be9240804566defceaf329a1dc0b5f54c2de98ef4e81ab3c53c9f294061a970da02e80a7bdab7b1fadbd106dfb8fd0bb5ffe9ad677433851b07652cff0c79a9a79d5d0800abb2355c484df3e38cb9b8ac860be0f3cc9d7a274d4908ae483c7d79e70caee025dd323a8a35", 0xcc}, {&(0x7f0000000340), 0x0, 0x3ff}], 0x211c68, &(0x7f00000003c0)={[{@nodots='nodots'}, {@fat=@tz_utc='tz=UTC'}, {@dots='dots'}], [{@subj_role={'subj_role', 0x3d, '/dev/full\x00'}}, {@fsname={'fsname', 0x3d, '/dev/full\x00'}}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}) write(r2, &(0x7f0000000440)="a47ca6d8511da293e02ad8d3f1dc127e31ea96c0e7e4c76f889b801ada11dd175e04d61876ceaff73edc65cba62e8c7936a249f5af54c19ccdc63e1f4dc6132538a73d2f845328aeec58d7bf28842a4c0e057b77d0b7bd96dc608076662b30eaaae6f6c73649ac7724ec86b8433b49c9c25a85b37d85b0c70ba9fefd70b2b1eb7dbd751bbeeff8736c70c0c81c279b8c30a99d0dad739e4a76a1ae8b4df413ce71cfebeea51fcf99c3814ba425ae88ff7f6886f0c4e5dc9abc69414ad20fc2e96b6d46db99641f30efa3", 0xca) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000540)=""/231) socket$kcm(0x10, 0x0, 0x10) 23:15:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000003001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 547.628604] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.628604] [ 547.714340] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.714340] [ 547.762977] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.762977] 23:15:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000005001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 547.880993] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.880993] [ 547.991035] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 547.991035] 23:15:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000006001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 548.165632] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 548.165632] [ 548.239196] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 548.239196] 23:15:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000007001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 548.495765] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 548.495765] 23:15:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1f, 0x81, 0x6e, 0x8, 0x9, 0xfffffff7, 0x43c00000}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8001) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x0, @dev}}) socket$kcm(0x10, 0x0, 0x10) 23:15:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:15:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 548.596972] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 548.596972] 23:15:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000008001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x700, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000009001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 548.767348] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 548.767348] 23:15:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 548.982918] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 548.982918] [ 549.121247] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 549.121247] 23:15:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000080)='lp\x00', 0x3) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000003ac0)={{}, "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"}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) r7 = dup2(r2, r3) sendmmsg(r7, &(0x7f0000003a00)=[{{&(0x7f0000000240)=@ipx={0x4, 0x96e, 0x7a0, "82a6c716c6eb", 0x7}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="3628e603c8c9c6a5d2ee0d09f5241edc596f22762ecfd367", 0x18}, {&(0x7f00000002c0)="3d4ea519c9214052b479501af5b8c8913ac0a1e390ab07d81c7e11927d850f8d139b10e3159d08333a12c84d21e0f77aae3e9931315a24aa8b684e98086e4afca4f1a4932ce220e456e734961834cd37ca6a9ad2ec376f8932a31ff49b0918c2e90fe28591815ed6778fc63947445a287c8928b60efc79a683f0804780368cf88dcdfe", 0x83}, {&(0x7f0000000100)="e9d1ff6e984c000c97ec17ef470f7639d157e772d5ad7eae5fb1dd1f2d589ed60137cc81a8a7", 0x26}, {&(0x7f0000000380)="5867de3ae16f437475a282ce00c2227682643d4e91f041d7fbbcc6baaeda0e301459f4cadc1ed8109caaf8bb4f3687403abbf9f41a2b890fe1d3762c03c19002002c483f84cdd6ff31f51d93e0db5da708bfdff6685d3363d631cddb2c4d27590992a90c3a75ecc5d6b5f378a1e47ef2524b225b0902ee56015e55aa06c819304d7cc0b3a3e1fcd7acce7be7a22262fd884aa8e58bf16c5fa8c23b2161e689126b20b273cad9677cae5bd204c1f42d38", 0xb0}, {&(0x7f0000000440)="350812e1e811f91cb9bc606fc7577043cbc92ef444a7be11fe108940d3e5a5b576bbb0957c48d97cbc9f4363e98b43355e4792abea0d5bbb44ca2d7ba675eeed923636263eafa597c861fc149aad3aed638bb795ca1c53", 0x57}, {&(0x7f00000004c0)="9c0c1964dc08a1161afff72ae3e1f32c7a2aca4dd82c06c206cefd7b676ddba18229d255a8818aa024d11bfdc05c0348d5d8b1e4dfe7c1f46042b9635f4a344c", 0x40}, {&(0x7f0000000500)="f722059c6563c755449102db0a5f365aa409db3d01f5765207e80b7098977a9def679faf1af2d090ad73239f6293f6a6c2cb69b1477884951e1825416beeebc96af2ea4dccd90ae3db7598428c74106f067d6ec6c2e5608ed6d7920f88239d0c50bac5cc3ceb1ab93128acedfa7abcbe7231403bc6b31aba05900aae37426ffddaf38127e16636277fba865f1ff1", 0x8e}], 0x7, &(0x7f0000000640)=[{0xd8, 0x0, 0x8000, "0e8e5f8d7de7c98b2ab28f40f590525dfffbb371e089c07f6ea6b07152c58b646b15d783bd1c73f50d156c42ac1a9f4c84f73595ed05bfaf1293a57a1b642974630722571ad7291fe8efa0fdea00b9dbad1915ea44ef9001d9f528036f950982f634898e030d3f5fca627986e507f29b4d3de7f5d65ce60ca8d83cf7c660039d2cd5b9bfe2576c2d42cc720fcea3b94ba6c78ff6e4327bcdf2026c3aa52f73d5ead33161bbc083dcd087656994442902fcf0ebf6b2326e1ba2d93bd8f808781dea1c182fe5"}, {0xd0, 0x119, 0x5, "5caf7ca79ffac6ff4128b0f16e24a04ed1796d0f0a958d493db40a1b195b3a11775072bd799ba62408dd3ee2f6faa1298182ee09052a09cbd814757d0244d289fb4e21fa7f40f0b1a2f3a661eb13fa51468a376c51c81591d26156b7a98d0c81ecd4336c47c788e6a1e952bc2a54ab2b288d58dcdb4b64c06f448fdb7ff6d8046dd74c93668d791ebbcad2fdfcb92ecae757548f04d7d725c72818a5ce9a38f7059791e2c37c6799f7f5957fcdebea478fa766a1c4fe7773010c9f0220d9ba"}, {0x88, 0x100, 0x1, "fc4048d97caa443c74791c37786ed2a09e0e002d97a97848ae9bb710487cb4e31f8aebc4b4c990b6918ae80efb4f97d2e2f71dcddbd412d75445c1220b2375cb9a48501fcb154b56d74d6c0e3fa9e0f111b85e6592c403e1c81f30db7446d4c1c14a28343f9ca6ff621adcb063e972fe12c119"}, {0x88, 0x104, 0x4, "f0ccb039a24c5494535aad985b71b4450c2c9cbdacd8899801f4cc0349aa9d9103db44ed1c5c48b43c43c35cd10e60c8ef694dd811d176b1b3cb1ca948da001a320bd54384988ca70b9d12fc37d9104d5605486e5a13f28c0b8cc9e30ac56f8d9757936ed98af894269c631b6e159fe0ef5ca6"}], 0x2b8}}, {{&(0x7f0000000900)=@ax25={{0x3, @null, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000980)="02639d3d33d936", 0x7}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="2d900cae9d029c81fa3f73320fdb7924c6a9ff870fd2a7bf2cc13bec5c208345a4f808b057545b58b989dac8ffd1bbbddfbe612709b2122b8bfc326f64a25a178f5db87b86982554780ec2766e6b2261986f2c6f7868bd6a827c3378c288dc8721d0f0eef5d3bb7d9c4e67562a71f9c4c987d9edb09f94ba1efdaa6609b19a66e7474a15a5abd855c204c5ba45620fb325cd9ec5cb8d6d6d86442b3b37149a67eb03c0b400be2408d5cc7bd67b22ad39898160227e78d6db06c0d964d23d9a743814b053acd6f64fcd2220d5afc524aeaa501e0c3831f906b1f1ca7ef450778150f8bea7e9cc706361d4ebbc90d8b2130f0dfbc10c4ad5f3da6a06269a", 0xfd}, {&(0x7f0000001ac0)="190b80ea06139418f71302e0fac070dede44b63aa7cc9c099de77cc055432311f81baccb7048ffc32f00006bc70abf545b25c4cd87f5ef841983cb368be4d8f7be6e53f5b42c773a3c93b0edc45b27ab5e5469b06a5ea82cad3270", 0x5b}, {&(0x7f0000001b40)="d02e450847a1f022eb90a9b5662d5f6f87dbe039606b215592b980edeb243e8a1e9e4ae8c66ba19810", 0x29}], 0x5, &(0x7f0000001c00)=[{0x30, 0x119, 0x3ff, "58a097b7c89e0e2ed89ea3ebe5d47fa3871334e0273825b17662a43e993fbf9a"}, {0xc8, 0x11, 0x4, "e2e42a542fe813f752de79b9ebfb20338da3f07337c9010f9b930d75b72f868f8b64a51f421f265b5e74df9fa4f99375311dd8003d275537be3d9e2920048071aefd4bbbb9690b7b31a4c2cb01199470816724c2e0228e977b23baac2b5202f8b7032b31adb8c3256d6ab3bac12bc057920dcf29db541957035e44ac987171f45fdff2baf4f76dbd600a1b59f2e59ee2dfe2d0d01d4240ff473ff2a85f2959553b6b0306b207e0a36c21657fd04d4e97d8458f567498"}, {0x40, 0x117, 0x9, "d4e8eab8c07cae4b425ab6eaf6fa48fe5cac10d01db4c39c8182c97476a122ccc435dd9130c575d1ae592e"}], 0x138}}, {{&(0x7f0000001d40)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0x0, 0x1, "265eaba63dbcd2dbf3c4a332f4fd45826a8561077bd7b8951f0f1fc313604d53d7c7e2ac5c2a2970acaf8daca089b016b33f607e79f2d2d8be622f2a043914", 0x15}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="0895089c8ecc8532bbd198", 0xb}, {&(0x7f0000001e00)="b99bf96a715001ac49d60f6362a6be751738e9a80b39ad104f51b5b9f64bb77a2cee1bd5854b8581025ba1fe05c9ea48276731b52e7d41b7ed5fccd7e4b15b3712491fec69cf07389af2a5aad24e107d8be8e1bac2f45e46b28411", 0x5b}, {&(0x7f0000001e80)="5c1119535069cd0c38105099b672adb001c7cf0d9041cecef1076db0a1c5fc95ef0030326f8dd09e4d80212de548f0d9f223041f4e0160db5fd57956714c7f29cdb7bff696b75948de19d193004de4a63498ef9d21e3ba44fdf68f04277473044af38b04d28d8ea6ecde6a866f59b677b0b67a", 0x73}, {&(0x7f0000001f00)="81b066869741fea81334c3c28cc8c2d5c82aa105bc1232917323c6c5780aee7901288420ee1d634fb3478697f0b5c4f49028cf1c7076a6f29a99e60deec710b199f8df8d11eff5528388021de9f6d88ea19eaede2d2751f2e04b8376", 0x5c}, {&(0x7f0000001f80)="3bd906bc337e4e175a6710451cecea3232cfc2eec31f12", 0x17}, {&(0x7f0000001fc0)="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", 0xfa}, {&(0x7f00000020c0)="184beaac218127f47f3bce5e8f74f5dae3b9846dcd03715437679b411812954b2985fa210b8bb7d1e7aedc92939a42083ca5380c32f74d8b32853460c003f391415874546395c803a1950168249f30b61464706273a7805e0f439ebd628e7b92ce07e6614e074626236113adf525bc2b084c5940735b74edca86f0d31fc44bb82ef971cb5bc28584e756e7ce0ab00a4464d0db1737d0fee5e149e77c3194", 0x9e}, {&(0x7f0000002180)="0779114f4d7e5fab73e4ede69acac83f1f65b3d9fd4ac19c0cccb51b93699b3786ec41251515e500f459d4a45dc604356b5a5d49048067c3c6d567d19ad16381c23db370d6d66c989c97de023c7db6e273d6c5d3c16b686fd5b66f08d93a039274331ad6ef929f44e78c8e38ffcca5edcc9370431236ebe910639e7affea9bcd7e526a7bbcca8105d0607ace29018b9dac", 0x91}, {&(0x7f0000002240)="f5818f5f894d8a71c1c293fb1df1bb82eac265c70c8bf0933f510aeba969b9704f7ffb367057ef2c43b151630ed6b938cf7476a94faf667c9e539ee5319d", 0x3e}, {&(0x7f0000002280)="46e9c809e45f9e48a86b185d05249fe3b874d6a5c5f16a0f079f639814df2d2dadec070ec3999ff3ed8b036b0c704e76f3d9b49773db", 0x36}], 0xa, &(0x7f0000002380)=[{0x90, 0x10c, 0x5, "fa21572501a477ae2381a7d3765f03a4381b40681d50b45d0119deb819bb9cfdddf79c2e47fd9a4a5ea2fb29bf59fab0f2764918e5e2e804a0ee86138080e97626adb953592f1cf2c895141afea51eec47d67844a2c3dc499e0158929a0ccbb41c955b5115c0c4fc01230cecd9486e1a630294e96e28f660cf38af64e9f8"}, {0x40, 0x102, 0x1, "9fbd429fe58e8e1b2d8b6ab243c1c2a2502e674433b5a8c8d1249ba0d6dd6a56d5568b3b9844ff3605cfe76421"}, {0x1010, 0x10e, 0x0, "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"}, {0xf8, 0x13e, 0x10001, "28ee7b0de0292acfbbc7d435ae16f79c0c6b1fb5e90766696acdbe1b57c443662d08ad4aa346ad2589ca68ec9873cbd17364b73d61c6c522749fed9c59c9d8e5733fd932c146244fa4d64ad82bc3fc0f9586c75f7915fc1127fb3e64913651a7234f91443dc01f73e2b7c045c96d13d2b756a7b5b43d1cd0705b6e7f4b5e4a3e1cb3a1498d28e5d1abeb105004ce1e77307c9dd23b4009f3acdba84990d38796fd982049030c63e51ca3614752465d33356d638c13294a3600d859a62f7684a1f98389865292401c66fc35e5d9d34e0ab636b0a62bb97ebb418d7a5855b713cd7eb12add86ac9fb9"}, {0x108, 0x10d, 0x6, "9b6cc768b55e78b7921b62f9542040631e32f3e2ec14eb47c120d7ab383935b6433fa6ace0add678abada43ff2cef2cb2ac5ac7eb63f42eb9b10efafe986615c7a04dc7598a588118f0170d9189a852ae97384e5beacc49f3456ee8d079b402a1d9d8d6c644303445f72bc6bfc7e61fe60f737c8318927cdd2fd7487e81ce73add331623a6f0c7fc607be8f06eb90ca3ec3cce73014a861fc63adfc3a1577193d112b24c595b2321fc67748ccc7e48eb32badda5260c5a09422e33bb922cf77e5d2a5577abd240ede0d58a002a815c1873af7664005bb4040e806f9284d41051b543a01426fbfea576b06734257e015548"}, {0xf0, 0x117, 0x2, "487c68115e573823914a7b7b05bece9b392c522722d4f594a26549e7593b862563797bb64b25e6fd59e8066d7e988ac9bfd3489b0076768bce5ba79e52b8cb1cc8b61c77ddca48d257df7feec3789c194c7dfa9d20a882739b4f405f9eb7d007a23ae54ef667ae42d9fc6e9b8e7a57ed3c75308abb37fdc6b73c1f0ad77a0d89b30808ea80b34afe9d329c57e6e92ac2b8ee15259484807ac4482fba30e9f9eeb4c1e21ec4e14d02939676e974bc2004b8a915974bc59359d79bfe326df9282b709c6104104babd0d9b64d08986ed3658462b67c89c39aeb74eb8d89"}, {0xe0, 0x111, 0x0, "27ed923571b622835adeb9d1a188b29b436b85e6d2e60ef57b7f86ab55fa9e27832d1bec657d2d83160263de790131a85a458677671edc4d1014f96c61bf8aafe71eded8662240ff6bfdaa0573ff3fd277793e764f03a263715e18ca8a7e4ba6a22f0a8a9d3418ab0e822f9535cea2ba51f472102b0f4c66dc5579ced9ec388d70ea29f9c8f7f2ba19ca5cc37a496d295b912eeee8b55cae51022576abe6cefbdea9a7641298b6841e4d7b82fad4154560c8b5dd7487f2f6d8daab3e4f72a09961f5126ad1414a3159d3074e46"}, {0xc0, 0x115, 0x7f, "ad0b53e93fb4e853ffbd1a9e4291e0b59327effd5f650782740163dd1bda96e35b4ea14af059bddabd9164b289ea7b1b9ab157df84c4409b9beeddbb907d5d631e801142345ac44d8fc5e00af3e3756a084b04f4412d5905285328476fbf5cb6d19590d5f85e5cfdd1f058b754ffb2d7103e7ac97a323a254c1f3a8d6a31c16efe817f15c5b482728ba03974f47953cba68496cce0c738b89be7ab0fd7ba488756ff98a79425dbdde33fed"}, {0x40, 0x10e, 0x7fffffff, "22125072e1223379e07d44d779c66e5326b47a355b674ee67811d66e11ac5d4486ac054e02655181a1e60498fad8"}, {0xa0, 0x100, 0x5, "0f2557a6dc701a220cfc4552ca6ff81a38fc0dec9c3d74b6793e2e2fdae99075b7e7233cdea577b1ae0a3bdd2575bc9f69699b30da7d13af0620a69ebac30405589b4963c6df74d9379f06c11fe273e36acf5c9376a36611432e3265c72f4c9e611bc896a88dfaed1d242ac41278ec0ca0dba4ad09048cd929dfdfa130dfdd93c23b344b0d5fbbf84872bc7ee2b787"}], 0x1650}}], 0x3, 0x14) 23:15:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000b001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 549.375683] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 549.375683] 23:15:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:15:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 549.505028] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 549.505028] 23:15:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000010001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 549.705399] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 549.705399] 23:15:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 549.787242] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 549.787242] 23:15:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0x4613, 0x10001}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000100)={0x6, 0xbd7, &(0x7f0000000240)="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", &(0x7f0000001240)="c1e222fddd7ea43509347f94e53f686c7f2039b3de8926b9d806bbbbaa6d238646112ee4d741a145c90d61d9a68877bf005db9739c08536fe76e79b9ef83d05d3d3157b4d8c53e4d6663711955fb15793be119736d0b1f2ce8dce5069f6f0cdd3dfb8bf522a23e26c9e3065c3696b8f5e23e5dc8e9afe94cf952028378549fd8e7f3054a5c834151ff20292f89cb1194c061bef8c93877bdfd51e35e6ecc6068ac5a40c450654f856f1f2fb9b9259094189826bfc44842b17145d31b7ae62a2745efad1d9b189aef6c8a530fe405735de96b33", 0x1000, 0xd3}) [ 549.944935] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 549.944935] 23:15:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000023001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xe401, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 550.155865] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 550.155865] [ 550.251079] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 550.251079] 23:15:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000002c001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x21f, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 550.616075] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 550.616075] 23:15:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003d001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 550.734229] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 550.734229] 23:15:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:54 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 550.850578] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 550.850578] 23:15:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 550.945160] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 550.945160] 23:15:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003f001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 551.139005] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 551.139005] [ 551.217004] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 551.217004] 23:15:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000060001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:15:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000d9df80001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 551.576611] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 551.576611] 23:15:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 551.725056] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 551.725056] [ 551.780082] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 551.780082] 23:15:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000ffffff8c001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) close(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 551.922425] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 551.922425] 23:15:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000edc0001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 552.182717] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 552.182717] 23:15:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 552.350113] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 552.350113] 23:15:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:15:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000020, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fffffff0001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 552.628076] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 552.628076] 23:15:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) write$binfmt_misc(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xdf) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 552.731474] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 552.731474] 23:15:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fffffff4001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 553.036860] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 553.036860] [ 553.197372] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 553.197372] 23:15:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fffffff5001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 553.494306] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 553.494306] 23:15:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x4, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8, 0xf32a, 0x9, 0x91f8, 0x5, 0xffffffff00000001, 0x10000}, &(0x7f0000000280)={0x0, 0xfffffffffffffffd, 0x800, 0x4, 0x4, 0x1, 0x80, 0x377}, &(0x7f00000002c0)={0x1800000, 0x80000001, 0x40, 0xfff, 0x8, 0x4, 0xcc3, 0x8}, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x101]}, 0x8}) r7 = openat$incfs(r3, &(0x7f0000000400)='.pending_reads\x00', 0x102, 0x84) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1101184}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2500000000140008006970366772657461703000000000000008000c000100000008000a000000000014001f00fe8800000000000000000000000000019b291fc59e07ae4c52479318f3aa097ba447f2cfeb41d23bbffd28626449a9f17255872764a6fa69e389450bb1024e4eb98d9fd005b6ccac96d308021186f45d6ac78ff9ccb93d8992da78e741f783de01b68d56a235d9230cf7ca0cd9b290d7e4fc6e8faf0ed6d1919debe3b840bae8a4ef7a4cf019969448bf137c90d6"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x14) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$kcm(0x29, 0x0, 0x0) [ 553.690421] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 553.690421] 23:15:57 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fffffff6001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 553.957993] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 553.957993] 23:15:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 554.055173] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 554.055173] 23:15:57 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fffffffb001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000080)='lp\x00', 0x3) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r4, 0x4, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0x1f, 0x17a, r5}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 554.284537] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 554.284537] 23:15:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f02, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:15:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fffffffe001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 554.537357] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 554.537357] [ 554.697390] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 554.697390] 23:15:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000fff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x2e46, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x0, 0x0, 0x9}, 0x0, 0x2, r0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r5 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000080)='lp\x00', 0x3) splice(r5, &(0x7f0000000100)=0x3ff, r2, &(0x7f0000000240)=0x7, 0x9, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) close(r5) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 554.887245] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 554.887245] 23:15:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000001fffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:15:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 555.081099] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 555.081099] [ 555.186649] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 555.186649] 23:15:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600007fffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 555.500763] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 555.500763] 23:15:59 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600008cffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 555.749881] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 555.749881] 23:15:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) socket(0x5, 0x5, 0x8) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) write$cgroup_int(r4, &(0x7f0000000100)=0x8, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:59 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000f0ffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:15:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:15:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:15:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xa02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 555.941520] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 555.941520] [ 556.046758] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 556.046758] 23:15:59 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000f4ffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff00, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 556.466753] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 556.466753] 23:16:00 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000f5ffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 556.700142] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 556.700142] 23:16:00 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000f6ffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:00 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000019c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e40)={&(0x7f0000002340)={0xb8, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d4c3f02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76957c7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe68e0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ab1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10a513a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21fdd901}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x947}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7956}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf3d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa583}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1294350}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56e9c1d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61970def}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8588}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ec5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7874a98c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bbd31c3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3dc}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000090) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x3, 0x5, 0x6389, 0x2, 0x64, "33ebcf9a919694fb05d16dacaf3f2c8e85d907", 0x8, 0xa1}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r6, &(0x7f0000002180)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/214, 0xd6}], 0x7, &(0x7f0000000700)=""/158, 0x9e}, 0xac}, {{&(0x7f00000007c0)=@ipx, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000840)=""/76, 0x4c}, {&(0x7f00000008c0)=""/245, 0xf5}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/106, 0x6a}, {&(0x7f0000001a80)=""/92, 0x5c}], 0x6, &(0x7f0000001b80)=""/247, 0xf7}, 0x9}, {{&(0x7f0000001c80)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/122, 0x7a}, {&(0x7f0000001d80)=""/77, 0x4d}], 0x2, &(0x7f00000022c0)=""/83, 0x53}, 0x8}, {{&(0x7f0000001ec0)=@caif=@dgm, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/222, 0xde}, {&(0x7f0000002040)=""/15, 0xf}, {&(0x7f0000002080)=""/31, 0x1f}, {&(0x7f00000020c0)=""/71, 0x47}], 0x4}, 0x6}], 0x4, 0x101, &(0x7f0000002280)={0x0, 0x989680}) socket$kcm(0x10, 0x0, 0x10) [ 556.920797] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 556.920797] 23:16:00 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000fbffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 557.235775] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 557.235775] 23:16:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 557.330663] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 557.330663] 23:16:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000feffffff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 557.525175] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 557.525175] [ 557.621482] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 557.621482] 23:16:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000000040c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:01 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket$alg(0x26, 0x5, 0x0) write(r3, &(0x7f0000000240)="077421115049af511076ddde1c948cc806d43b3333169b4b42b5bcaaa7a77f1d0b8187a84111b26f51c56973dcae69a5b051dad235d92bf9afefc27d6b295ca2cbf9f0a68c338d94e0c604fe275359f208d40b830e640e339792e843ff5abf14a470c3df9b0646518c8f4a658941389a1d35942017666af011f51b12b8ad9d9ac5d3d167abfd", 0x86) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x100, 0x0, 0x8, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x20000001, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000000080c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000020, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f32c0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3300c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="ecff00ff0b02c957543fba2d92d63054995cd6f4dda790687001d7eefb94607dfe0d8b806d4c660d8ae8c32d640ef0d97a7485d03e2b29e21cacceecf284db1d11241cb40c66941f12554aced092ecb49890d69a854ee3e52f8095cc51615225cddb5db50468bbaa0015607ebba3f3cdfd6689aeae200100006ec82d292ea96afa1de343"], &(0x7f0000000100)=0x8) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x21ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000fa8189b8b9210009050000004007a2a3", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800000008000100627066001400020006002db6a8040000003a0004000200"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1b, 0x0, 0x9, 0x20, @dev={0xfe, 0x80, [], 0xd}, @loopback, 0x3e1, 0x8, 0x175e, 0xd2}}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3340c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3380c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3400c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xe4010000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000020000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x1000, 0x9, 0x1ff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 559.852683] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 559.852683] [ 559.972427] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 559.972427] 23:16:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000030000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 560.410676] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 560.410676] 23:16:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 560.487904] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 560.487904] 23:16:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in6={0xa, 0x4e22, 0x17fc3bb5, @ipv4={[], [], @local}, 0xfffffff8}}}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00') vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000040000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 560.708145] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 560.708145] [ 560.771021] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 560.771021] 23:16:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000050000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 561.056649] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.056649] 23:16:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000060000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 561.109287] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.109287] 23:16:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:04 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)=""/253, &(0x7f0000000040)=0xfd) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000100)=0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 561.263654] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.263654] [ 561.333959] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.333959] 23:16:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000070000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 561.528183] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.528183] 23:16:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000080000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 561.654166] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.654166] 23:16:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100002000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 561.776906] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.776906] [ 561.843816] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 561.843816] 23:16:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000090000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 562.020436] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.020436] 23:16:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000b0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:05 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x7f, 0x3, 0x0, 0x9}, {0x7, 0x7f, 0x0, 0x10001}, {0x2, 0x1, 0x1, 0x5}]}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000100000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 562.251015] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.251015] [ 562.338723] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.338723] [ 562.399416] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.399416] 23:16:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x200000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000230000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 562.596747] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.596747] 23:16:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000002c0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 562.820951] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.820951] 23:16:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 562.932615] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 562.932615] 23:16:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000003d0000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 563.120058] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.120058] 23:16:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000600000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 563.242706] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.242706] 23:16:06 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x101240, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) listen(r4, 0x7) write(0xffffffffffffffff, &(0x7f0000000540)="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", 0x198) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x45810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x6, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000500), 0x0, 0x1) socket$kcm(0x10, 0x0, 0x10) [ 563.340817] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.340817] 23:16:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x700000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f00000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 563.396720] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.396720] 23:16:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 563.489950] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.489950] 23:16:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000300001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 563.622049] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.622049] 23:16:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000500001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 563.680037] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.680037] 23:16:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x800000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 563.803787] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.803787] 23:16:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000600001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 563.877340] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.877340] [ 563.956452] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 563.956452] 23:16:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 564.063171] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.063171] 23:16:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000700001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x101, 0x6fcf, 0x8e, 0x20}, 0x10) r2 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0x6) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000900001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 564.196479] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.196479] 23:16:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 564.299503] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.299503] 23:16:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 564.396932] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.396932] 23:16:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000b00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x8}, 0x4020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x8, 0x100000000, 0xfffffffffffffffd, 0x6c5}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) r5 = signalfd4(r2, &(0x7f0000000280)={[0x7fff]}, 0x8, 0x40800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="03040200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[{}], 0xc93, 0x0, [], 0x4, 0x1}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x900, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0x4}) 23:16:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 564.570218] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.570218] 23:16:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 564.719050] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.719050] [ 564.762578] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.762578] 23:16:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002300001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f020000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 564.953447] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 564.953447] 23:16:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002c00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x101101, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000003d00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 565.150015] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.150015] [ 565.231197] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.231197] [ 565.277346] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.277346] 23:16:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000003f00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 565.477556] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.477556] 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000006000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 565.547936] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.547936] [ 565.611434] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.611434] [ 565.700817] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.700817] 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000c0ed00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fff000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 565.775031] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.775031] 23:16:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x20000001, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x20a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xe401000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 565.927636] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 565.927636] [ 566.003194] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.003194] 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000fff00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 566.099875] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.099875] 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f0ff00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) fcntl$notify(r0, 0x402, 0x100000021) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 566.198530] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.198530] [ 566.288283] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.288283] 23:16:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 566.468975] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.468975] 23:16:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000010001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000ffff1f001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 566.590633] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.590633] 23:16:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 566.688431] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.688431] 23:16:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00000000000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 566.809496] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.809496] [ 566.886641] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 566.886641] 23:16:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000080dfd9001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 567.067656] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 567.067656] [ 567.129698] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 567.129698] 23:16:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8008, 0x6, 0x0, 0x0, 0x10001}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x309000, 0x0) ioctl$FITRIM(r5, 0x40047211, &(0x7f0000000240)={0x3, 0x0, 0x8}) epoll_pwait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0x8, &(0x7f0000000100)={[0x7fff]}, 0x8) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000011000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000021000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000031000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000041000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000051000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000061000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000071000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000081000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000240)="e68d83b10b268ee34574fb058f7d3ff6796936e90c1551627d20cb0f7b6e840a923dc3b49cecb2d70d354f867ceac9c3bc051e7cf848aa0831fac09f73cb9d2285e65a97") pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) socketpair(0x1e, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$packet_int(r5, 0x107, 0x3, &(0x7f0000000100)=0x3, 0x4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0x40047211, &(0x7f0000000680)={0x5, 0x4, 0x200}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2, &(0x7f00000004c0)=""/215, 0xd7}, 0x2028}], 0x1, 0x40000042, &(0x7f0000000640)={r7, r8+10000000}) 23:16:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000091000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000101000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000201000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000231000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000002c1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:12 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@func={0x1, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x1}, {0xe, 0x4}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x4}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x63, 0x7}, @var={0x10, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x4e, 0x4f, 0x30, 0x2e, 0x2e]}}, &(0x7f00000002c0)=""/100, 0x7f, 0x64, 0x1}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003d1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003f1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000601000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000d9df801000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000ffffff8c1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000edc01000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff01000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100002000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff41000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff51000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffff61000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffffb1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x3, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x40000000}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000040)={0x1f, 0x5, 0x2, 0x5, 0x40, "0c7d76e7103480bb906dad7aef72ef436e2145", 0xd27}) socket$kcm(0x10, 0x0, 0x10) 23:16:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fffffffe1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) r2 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x77359400}, 0x0) socket(0x0, 0x80000, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x40, 0x4, 0x5, 0x5, 0x81, 0x3ff, 0x401, 0x401, 0x5, 0x7fff], 0xa, 0x40800}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x62, @local, 0x4e24, 0x1, 'lblc\x00', 0x9, 0x9, 0x2c}, 0x2c) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000500)}, {&(0x7f0000000300)="1856575ffb0426", 0x7}, {&(0x7f00000005c0)="6200a97f55232ca9fbf77657bb131e6834b081769280c8ea036407778ccb4a8cc431901c2049c074dbb598d41c4634406e9e9fa8440bbb870bffb0e1645e119f5cae0cb9c11206a38e84a7d18e58f64db0a255d379a2231362d6efd8693ea245a357c193c1bff2dacc9e62febf88ae941394e148a55866df4e23f92a7cb555e5ce864172d051e6b53777a5e06f7f5a9e57547359a2d9aa350000000000000000000000006220263afa40b627fba57bd64a02053935d65c3e3aebcc732b363921b94180bdb9587070913e455e62875eb7ef43", 0xd2}, {&(0x7f0000000400)="45aa97742087d1f719aa2a45616d47ee85d07c2fb5207d7bded24efe0fe9ddba14787fa78bbdadf68534e20b1e3208e038aa895f776b746cce9dac75704792ddbde8bf1c090e95a94406f761881e69ec947ff894ca9f10cdd01ef5ce87d12a037feb6a06d2cfd5250200000000000000", 0x70}, {&(0x7f0000000480)="6481ee6d12bf1e2e23ea41a6856d80d86ab9fde37069eef07f1d16308828a01ab2c8e06df326c538465580d6b25335a4ea3d450b30ffbcea1d1651fe77ca5d70df3a6ec2b32219484df7fc4717b3619dc8b8383cd36245a2f0dda238a588180a1e09462f71e95f156e271d394d33091dea1e47f7f47986293d9ec1a17cdeb988daf4b52ed1c4b34f6345083df3c039e1656c120d7435a64f4ccfc6fa749228762691aa", 0xffffffffffffffc2}], 0x5, 0x1) socket$kcm(0x10, 0x0, 0x10) 23:16:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000fff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000001fffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000007fffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000008cffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x10}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f0ffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f4ffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f5ffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) accept(r3, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x80) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000f6ffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000fbffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000feffffff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000100000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x64}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000100000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:17 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000400000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000000000000) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB='.-file0\x00'], &(0x7f00000000c0)='.', 0x0, 0x2233080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0xb46}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x6, 0x7fff, &(0x7f0000000100)) 23:16:17 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000e00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:17 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000200001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 573.791052] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 573.791052] 23:16:17 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000300001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 573.969355] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 573.969355] 23:16:17 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000400001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 574.027579] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.027579] 23:16:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 574.152318] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.152318] 23:16:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x1e4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:17 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000500001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x800000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 574.342141] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.342141] 23:16:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0x40047211, &(0x7f00000000c0)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) sendmmsg(r2, &(0x7f0000006800)=[{{&(0x7f0000000240)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="4825123bd3bd6633d541eb02c13596d0f16b9467e616a313088d02a3f89af9a5d6a16992a6ba55fbe5e749511d219980798c2351059790cec4e35c2f20b41aea49b7dfbd62233a9a53728b346f07bcdbbfa410fe01fabc43f01204a73bf5c41b3588d692b9c9cdc01befe5b50319d01a83b968f71157ba040a0285a82295d3beeb9f6fbd805c3605c803cdd7c49817820e4f90306679104fbcd1952925241dd7c5da663826701075448c7ec6016ad013b1db69999bef5208a94f9d5b831e4c694738a60ec53808625fe60a697470c427dcce8df6566f9076fa1281daa7ce8d49633f1737cb4642e744d228e4a10332a502e3f835ecb599cd85fab8", 0xfb}, {&(0x7f00000003c0)="09edfb721b545afd4ad8cfd78f7ed61145d695f13947d6d6f415fbf697908c2d1d1c78347f6d6154115d7a437652d1cc33dbc3b012161ee2040cf901487741d6e4684e60d1c3b976a59163ac61dc7e6a7ac7171eb2b7ecb5dd69aa25007cd8", 0x5f}, {&(0x7f0000000440)="4e1b14a9542edb71f31f575460edfef371b234adbded3b0855db125609557cde4f235fcdcb4b374f955608be50d511827bdb6c3f8a7248654ed2afba6b7e91531d31e17ca29399bbb75b02b908021026a15b2ec6e382825c8f60f5762090808dd265702e306277bf997896168ed00698c120fd90205c7847debbfa7f837e23fb6e9ee3adfc9217812504bf9978f7b3df9567bf93d546be8b23dc7285e6321d46f33d0840a9a43c611164d52046cfda3c2a341699603e3cfcef886b25b2357f5deb0e36130b3f0950e1c5e740052e98dfe48b82b3c79e00038dce5db4b33e449d468169eae1847dfac84bf3ef6f5d7964ab", 0xf1}, {&(0x7f0000000540)="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", 0x1000}], 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="d0000000000000001701000006000000cb652a7ff8deab7cb5f917f38bcde8340d7cca7ad146692840f4a73ae0ccb4998c4b89eb8d8c78410ac5a1380739c287e4342feb5afa2224e8860e8b383631f241ade1b230e4f07a365d7c0d96f1bb23bcf857dde4f0016fd8f162d5379868b366ff2088f40f6be46cd1a251a4129344d3c4729a9cc2b31fb09017021e726e6619e35dd30bd134adcce812531464e22f40c5a8a4aa62a4909fe7b9f4082719dc2fbacd4be0b3367b72133f003b33e69471b229e3390a99a6e5082afaf1550aef380000000000000017010000060000008acc44fe794caf9d338d6e93b3fdfd1bf0167b3fbac29c01fb6573a2fafcfa3d610369105982000010100000000000000b01000000000000309c5bb7a3942240aa3065727ef450f34303796a1aa1a7b2d2ed548663448d22d457fa836b6c8e9c7d6adec2ebffca438645489c18b5e2735b9425f2c8837d7069974db6bbc8e71c32807afc717bd232c4c8107736a1b48de22cfa12437c8806e4e1ac2e9ca027e253e0d43e635053d017a917dac7b2dc6a449832726f437452de2a3b392cb851f6ec39662da9c54c03c56457ac58e603556361ea3aa602fc71e174b049dd2d0b5b36fc777231f73e32cc4adf002a55686764d92b71eb0a6d4345971d109acda387b9609f7cdae7baafbfd24bc2361e6cb42d0e76260f6068fdb75905dd2d333ff9d63e9096909116c2006367a1ed71c033a6bf7703b58db4e6dc67cf842e0b877c119b300f32d85f25c118c4d8d40bc235932eef294d37cc9d4461fdb8891742ebd9f21e6efba383c7142e3bf9b30f9b4ca006ab2b39056e27c2c43d2256381276162284fcf5c84c72f4a89131143b91a13a18a5482d9e65b3be81a5f6380207df0cdb0aa68ff876a0fa6faf9562a91df25c24263d66a444fb0af875cb7353fe6656d125abb47a08158ae664fdc010ed81e146338952924c5b8efd9a889e9a93e4079346dbb5dc5f787e77666c6c992663381bed79e109e9a00704e247b4915589f058e8965658dc0f95e9aab1546e9116225623529c8b77d1b1de45ba294f01c98739dfabd4dc487a51cbbde70c6ef9e79e80a034272f78cfb7088a817e1d2c8e7e8772ae7e27a0f4e6189bb6199fbeb15f4aa6cab517e18a1fb36ecec86a73efa64d57b137955e57698960770538b576794886d26cf8be74de8f6ef6bb501196b114a8a6273343cf2a2bd497a49da07d5f4c9a428895377c0f506034c5377c3bd2a08b233c7e92a8b738ecbf98e0b5dacd61616eea1c1b4af7f4f31a01f1469a5d3be7113d31e7ca4052948e8055c759fb7bc3ee2f32ea72add79c1fc6a82c20015c42a40524c410249f75d12a5327761002a58a573ee3435a2ba6020d947c79430d5a50ca35d9014a1fdeaafa90fc992223cb58d9caaabb3ad023d76aa6657e4f8884cc18e98f3c35098a9da02ca5652b727485aed04d2aee02149a1518ca30e416f3d22c656144199609b5d6e7859067a9f85eb9eb6be58c04283684bd277811ffc781b16fc7a05c6b76a4ec341ea1fd1c7367119f9215b06f678dab44328bb409de176382bbbfd845315c687b83b75629175e33dc191f37fab002a32c1ab219905bcc1be8baf994d328343f886c106ac1c9d85b091bd70ab4f075d7dacc8ecdebcf5d126ee32f7932eda72a9c3ee7a108662117ab58aa8f7e74eac693ccde7c7f78b9b67ba4df1b3e09b05b574a6738a7a470436ad88292c996add3313233511ba83583cddeddb30ac009ab2a86d99e6a4ac0f50f30e4f9c0ea52fef8f6526a48cf7fd3e2df35a19ecee3e8572747c48312d65f64441e3ad09128373410acf8724e29620e49cca2556f81343b7c034bd28fd5db16066948fbddbd472b7175e950404eb696fb00cf36b57da515d349ce3551630c2940787ea1269ff3eefea6dbddc847435a1ae4e16d5774fca42bd10b553e0646db5172c763c6b079940a023fc9d89585d3d00038d3b1c9a261de7afcbf5a11e4fc72daac02a2f09fb377125ec15145d654be3c56d0e3c1bfe729a9f73b33f0fb4aaf8e545a7b83d66316198866102c2b16c2004eedf7b3307c72cfe7d8931c08c3cae1eed61390ba7f892e8e880b0094b38993519f18d6d2a725c2fbf2c5e314867c87f2ddda71368d4e6ba8c552f1cd2e36feb1be558d0d3dbe958c157829a3072818fb237569beb0a1bb7c5faa21af9efda5684552a4f748577c15b0b5bf10a523590ab517518827a6d84d43c49498b5a91918615135d0f20e20240a9322d152026a4c9c667682083fc6cc98532a194f637718908409e6f6086c8cc7d410e7ff276a6ca8206a09d0189c97fe2471ac37279281f1b85d04610a3586c9d9f079c4410b80ab9cce4623a68e25bd55752fd12885a100cf11f3c8f8d639e017064eb56b21be118fbb07f04391257bf38a1a12a8e26a6e7ab27d8666ba46a31929bc87e3dee909e78c8758b0b25754e9fdded29c26ea09ae1e44abf560095a17d8eb64109c0135cf9209bf4e4f5f39d966ec7ba793334a8769f0ab7814ff75a4ce7146e7ec7a569e70cb16ee19ecd67cb0d047776c82d4a60832545e75edaf92fc3c58d38073462305aeb85103a69c8a542a5a6618683b991111737aa4d144952edc67357cfcf896f2d39fd5f6784b5258a6e42961cf91baa047133176fbdc454c9c6779c585615c265e55773ca808ca1fe277d4038172116966e78d5fc809730ec1ec86de287cf18794badeaf4a5912a825cb274d35c1241b706cc29a7d24643053f8196cdfbbe4b07f4b3cf57b65b2235b8cbbb1fd0f84571ecda0bd252f7d3354f2a82eb53a6eb2862e50081b241d16e91798c8da5be4938f29494f66cf6747bf51d309e04b8e0f8870a1a3ed5b9fed2caaa0666ce4f68e793268468b9329d4b09b09fbeeaecd5dcc07c5017b0fa1cfe5344636da710aceec3ee5d6f280f385749a28664296646187bc83ecfdf9af27b0c6ec251f8c1df5add37a4cf56c809fdaa6e258f542add09e60df236a2335635d1265e63a5186a3309234620bf074f660cefc258545fa7850e9cfadd6a6fef5ea990de10bd705546eb6d28ded5ec8dac505d1dfb898c399910dbfdba38c9d0cc36b069f3f7ab1c27aa2da02bade7ce4fb273574ea9b37a624af328f33d04e7d80b66f31fc64c4cba787b7c9bc4f76992283f728591e7a8d28376a38bb4aa0296a7c852a1f6e9872139064d6d2f51496da2a231873772a2ab736b86f0dbb449719e8d67409af5c82d78047da840461eea398cb5e78fca0fe7fbdc38ec17f1d44e7597e746a68614be332c10ca495395e56c8123040c1fe91279df13d2adb7dd15710c11370f0b4a90c7c1d8c4614d19b8bc162ed5aef1e26b5fb23da86ced26c1a813915a27cac9d7c1775de980ef2a7a944ffe03dd9c251b91eab213887a0443ed83a7ffa2b4d2dcdae5ebc5d68a23a4ebe1a80282fddb40cc0b9792977b2f2352b1d3a1b52a9d50c0bb1901f38bb7a73f8e70298d66c85614f98524e0d3722c924880506a43c7eba56252d6b791deae4f97cf593598a23211ec360d2866f5910f786789a6b87e175b69632412f586215f05aaea611f62c2cf240ae30e59d3a61027858d998939a967ad0359371ec988f3254b530ee60dccd1475c2403628bd7a5f49c96efd54becb207ae8bd3eb27237908734aed81be77a343bdc30c2ab2275ee90ed8b24558dbb71ed580c92223d222a1aa15ffeff3d19ad200ae8e502fe452c28cfd2517d98581e41ae6db0a38308247d28c470d978a44218f1ed3addd7dbf07bda5247a7ae909ff49da12b0d15df673e7d165e8dd4ea509b5cb50c9053013ae43a0c45248a87870dafe5aa168d991883137dc8224835ec2f1cb4559c188dd9df22541e799d1796b1a342c20397f1c64a0d4a011d8c688904fbd4696e0884f1db87cc99adf9d9f3acb0bf9a61345ee1d73e115e0419ee359139bedf3b1ccd1c8f9a2857d370ce07f5fa8dadca9861977762f3113fb849c9090406e1ee6c4eff645119f5ba076385dd3111b7cf4b417287a3e7e98b7cf5355836325e671deebcbaa7a2474b2e78de0b0ed24559854c99070465b64e0dc474e0fb1351293b25f89f2350bc81d7bd6088a40f4ad3a596108ba0cc724ffd551bac032e8bf48bdd8798e89025bcbdab654ebd862699349fee20bb9c50d9ce4c81dc1f791efd6425a07aae6dcb08995107dde17087a71c1463283e292b6cda86aa61937db817310fd32e268f29659f5faacac72aa6fc455d8cb91dfb166f33bbc3b7ea2be307416f2b454439972fea3bc645616477a4bdc69e7104b6aa4dbaba936dd528728d96607c1bf391bb3311259fc5b1727a59af15b51f287095dd35c066594307c4d093bdea9c7e072f90f90e6ff7757d23ccd366caf4f7aba418db2627e6afb88010e043c7ea210e6fca00328c689a668bc07d0e486a61b899737721b88d3bf36f80ba87c4f1e19df850e58794aa746c00e9b86e79aecf12b1984eeb3323c9db37074e04e0dafa9e20311b1dd0046941e0fd2b1b64bb47c0ab0d36f1e7427f7f31490e2230dbacdff2de953f3ad9e8b19b5b1f8f3f41daad6d0821477112c5c77386ed483c33fb90a7c3c4f8c859cf43213c1f558dfbf29769a10ae1789cb702087dd836d8670b64a3c5ffd2b060581638f8e7a9ada85ca3c66c193ad622fa6df4caa5f7abd87e49db35d441c74252803eff27afe39098bbb30369fd54bc7a060e92e788f5d87346ea32f4cb720a9c060a5bc15907f8e77f24bcf883126bcbdeec2b50c44152c191599ef2cfd2d7a54a19b56fc21b06fc7f1388b935c4c6267aa2a88e999ee393b98b0a417f16b21ae9bd08e152ff27e5f2dcb19aae9099b0565b6d38b8d2cbc8c5ccb8fbd4c8653580ab8249c08b84c1e3299c2650760737c7a9fdebe7d60b5e8e0bda8514fcf514c5d8b795a82a3441622effa2092035ed3adad781182f6392962f44c682d016210f9b181dfed4ddff6edfa419e0a4cb875a37ac19a7ee758b1753274d702f3522de9b3c1dc65793035c3e711181afcfd977139d1e87245c1627ab60bd2117b893821511df091fea01aab5b5bb7fa25ac00b976f0ffadd0a1fc121526314c71be6200354f0734212d489b51deeb8825d35800e4ccaec9f4c317eaf0ff8bfc873d04283a9f2ef3646096bde1358853ca8ff18d8b015ecdd0e97b7b324ae59fb7538a1d451be43b8c6542996c1caa8d95abadeb951c5ccef7d2e1583d6bf09a60517d4222ed303acca766ddda8df22ba781db5918bc610abad9331ae29cfb2b8116ec288260c345237c4f70283fb3da138e98345933e5a990bd13ab3138637b395a2ee239345fac7ff75432e7d2ff9a599f15917ea1dfdd8ce7b1f9ffac2e9e40e0c685863c87e62363537248a1834b2afb55327a95f4da20473f53ad4b14c5a988175d2332d5ec9fe0a832fcda72e33dc80060802591b3c1b7aa96d7aae83d8719de147b7c59cf5d0a289632b34dcb07f1eef9edc8bc8da4e77774eb5f09e19db736d79f5f57895fceff8eac949cfe2c3e1c50d29a19ec7b590e4a0b3541fc88f283e18ff60f97c76c94bbb1c220215757c4733bbdab31c2c0c3e5c8b8c3db27560c53a7aabcdc4d6fc53d27c59d17572e4040073f315556e5ccf0bd077b1fa60c2376b004de117a82da6ba675f9378df8b106b16c0aa18e6f04f01440212f0bb21a78c27e63e827ffeaeeb4dc216d064ebfd5b5c4b18c58fc442fc2a52f85eda1a9cdb60aba98299b2a4bbc54b38f11bd6b566444b9f89c0c44112aa9e1529c7748e0abd528982e367a1f4dcddd28148d25b4c534c5cc15b9439c8f54f784555ec1b1f25002ef93b895a4d865a534f60ccd58e605eb31181e7f5b0b09c6411d25eb92bbca3e25cdeaab6e960369f6ef352870b987c19d5ac239b58a8ea61887545f7d6ec32c188c95f459a5c32f779889abfad27f93d039c38eb9e1f31ea1efb96809c232f1dc6f0b5c25b4a430f9ae7f66e1105674b19f654ac62ca3b224545b468adf362295b5eda3ae26356b459fa789be880ec2befaf5fe0cb68c05a09b1806062295a79706c0f8711ccecdb6caa9adbf851f3d5bbb1948285aa57691ce8390d2c2f5ff8e33cfca2eadb4c0c717c90ab28a271565615cb60ce8b78"], 0x1118}}, {{&(0x7f0000002680)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000000100)="4918eb95541d1ab57a1491672436f6ef924e135c379fc3b7f8eff51236ae03053c", 0x21}], 0x1, &(0x7f0000002740)=[{0x48, 0x10b, 0x401, "57dec0e947b90c7fc9e44e13c72686638b0a45e6cfd3e48a9aad9137ef6824bb38f64618df30536800d71e3e087c4ef930086fdc0272cdc0"}, {0xd8, 0x116, 0x8, "ef0da6259b17d2fbe16a3cea355c27ec0a6b3d6704774be85cea0e556f63077dfc4709ef3f75ac9a1de6270ac1914f9129deeb437bee37831e438238909a487969a2b9fb1bfdee6ad5d086f8b41b3ddc76a57caa6b129e099f51cd6fd555a41fb8acb80466fedf7cccdb01ec3a801f44b4663f0b0873628d476d33b4fbac768388fe84bb85c72d1ef1e4d66f4a759c1c9184c79db90bc720d8fb70bad7e107879b6a940308687791e5f6522291523baa14a3207a9ced09f14ed02cd38a63b0e6a572ae"}, {0x40, 0x110, 0x0, "6983f76880ae88cbb61edf0e1587553144b5158c284e71c8c1686d2eda094bb5780895b8a2ac19f849b7781c732a"}, {0xd0, 0x115, 0x6, "541b9c2f6b36edf942d426d571f59cd54cb3360db4c9f516f1ff0a48e815f35065aeeb564f3c966108e02153a96ba448e7600d23932c1ee0aec31019f33e31ded7202ffda7de41e6b794857d05daa4993a2ed889d1670695d84a5aa2675b3e06b655ada387473b81dabcef38af006466313902c11190699a2de249a0134079ee6cc916e741e5cf9c7c99a272385e6587ed888828a26536d273d0168cfd944eaf86f8a28d82964bb328d4dd434cff1689b3bfe0aecd30604ec0b1338d50a0c365"}, {0x1010, 0x88, 0x9, "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"}], 0x1240}}, {{&(0x7f0000003980)=@rc={0x1f, @any, 0x3}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003a00)="a088eb662f06b2aca72e53d031b07cf7db33756c876992dfffb5e9ea0fa26c5098f2b7c3f6fd3ef242ef3c33a08a18c8e90d1568034ba50b2196171fbbe6d28a9b87538a38", 0x45}, {&(0x7f0000003a80)="5646c1fd9fc59bc5e8556e09963c269617c526813664c4822cbe5471b7f065a44c993d177bd53a6079d410366dadb348df8444ece04066ca4f68ca94ff1be067d4f11a642ce9a10780ce073dfea5c6c20985261d2683", 0x56}, {&(0x7f0000003b00)="3b96ed1e720502e85ef730747df69bd37c4fb75cbe8b5b55631bb8101a26ad15a0c4c6bdb9c2b7a02c7399a97d198c1b53f015", 0x33}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)="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", 0x1000}, {&(0x7f0000004b80)="873e8c0036e2439a2da1fd089287651879d46eb167db6858cdb6b0e14ada5e3b6b05c1ab2e9729f175bdb5941032f3a412872c2f81067a4c833fe054345d90f8db017af72e01f49f2c8a0ad3f1cf3eb491115f5c8831387f5b62d2d9f0d198b4f780a134ff49fcd5af5e197635d5c91b11d151e41aa5", 0x76}, {&(0x7f0000004c00)="168c83ed16ea74985034e6368f87961ffda790fa6eef13b2dc678d3fb92c7c7623ee605e0844cc9746c5595b520aab176b36a25519724178e8fbb91e959271916a5328aecfebbeb378de4d48b4c9ed062eadf7a5cbf2986b777d3e3369c55f", 0x5f}], 0x7}}, {{&(0x7f0000004d00)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004d80)="9d2fc1907976c1ffe080cd712a7ae401ac78c9a5d1b2a6f8513903dfac169f9f6ea65d36acd0697acf6eca7b3e4825a3b2493e47d457043182c0a5025c4e3f09401130f73da55994a1f005e40084e73c2d8d0bf91404f97f15", 0x59}, {&(0x7f0000004e00)="d3efb507cf27984163647447704203c1758337f41d72405ac6662e36eddcc4d4b96c1ee0c9c3aab629945d6415532af44d92c67e3bfc492aaca43d471bc7aafcd56e6f5af107f036927cbf200cb987dce48d7b0997fafe34ac8a6046b054db41ef8e3d587b793f0b09478a4bbdbbd4402c50d2177be0300fd9d5cbb36105f599345f4ac09f48e1fdb6c3b7b6ea2d2ce645cdb39176f65057750f14f9caf0d0", 0x9f}, {&(0x7f0000004ec0)="37f988c0317643f7a6740a86b29534e16e66995e28b36789fa18c2807fa747480eb2e7933af2e7162a215663492f59cc2486443044ff2d5ff4d294cb1d7d5b8c7e531aedd5ebe061979d3469de981a584fd490394022d8adaa2dc39c8f001000000000000038", 0x66}, {&(0x7f0000004f40)="e02815a9a23d25282b8e0eb3987745a70e7412400c54fce84f6ef1e0f1c1a1cf8604a48ca51e94cb5a4cce8556e4c1bd4fdad309be0480856a90c32978abb21e89ca5aa7fe3033ff6835f382e86593715e4d96c45aceb3cb2f9aa8595bbcdec3dfa11227b432c026f24ffb1b740b534460fb1bd54b76021aed294d32152a7f039013789179874b4abf59ef7dc734464b4dd6e7d4bde0b4bcc644535edd972e3b906fedde314c38ab0390ce868ad19601528c75bc55eb4e53afdf8159e2d2fc1c6ca92cd4a7551734cc666071883a", 0xce}, {&(0x7f0000005040)="28841140d527bebcf1bcad82339625538078e3822ffaa90b", 0x18}, {&(0x7f0000005080)="6a8c23719c6ee20457e3c7b1ec0351c9ba999aad8bad900db9b63a4b348db525d0eac88f201a2cf456b8dcc596d1ec446069e1c0777d3e", 0x37}], 0x6, &(0x7f0000005140)=[{0x58, 0x119, 0x101, "aaa6e9f45d9d0c6c7dc6c2fb3e555f40dfb70943ecbcb3f89cbc3d7ca4313426d9fa7aeee63acf8fce34e64cd9dae2a1515839dd05a8e9a2db021fc1ea15b0bb65e6e12151a1f0"}, {0x38, 0x88, 0x9, "0f22de3c8056ea7277deb967c61e58bd7467e7f7a53bc649260f44f36757075dc4b94a5bbd53"}, {0x60, 0x10e, 0x7, "2fcdbf8a90267dcfda8fd15ce1be0d61b6e9a6bd66cf90109133b89db07d719fc60907a0d7d314475e284bf252cb45546a570e88b835b3411423924790ef44516612e966f332cb7f9e7b"}], 0xf0}}, {{&(0x7f0000005240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x6, @empty, 0x7fff}}}, 0x80, &(0x7f0000005780)=[{&(0x7f00000052c0)="3791ae6a19fdd4c8aefd2b75d3072a699837650794395f1b265ff8b962ce0cf5219915f605530e81f0a7da85b739145dfdf56fd724881b17aa89a5bf7c228c4dff4b46ada02413748dc66f6c1e0b6346c3e5072afdd5f9ee3963fa0696ea63b006c7d32f884d9016189841941d408cc12c85ab188eaf752fa0bbab11ef57461d12170568f704999742e56242f0e2397a9eb0822518ddf4f3f4fe0e4a7aaa68d65a5ec83bb3118601a40a0f000c5b9c3763a8cb83d4872a0b85fed1e51a36f769b9935c05098296b01e2c481442e9d3bfe8c8dbb3f295ba4c155ca2d141246bdc669cb127959c8d74b125b6c0d9d3ccbe4d", 0xf1}, {&(0x7f00000053c0)="6ded36ce51022da5f8f2c20c6077461b964d9ca38586877e185efdfca56885efe45b7d61df7de7ad5cf7f1716cdb7bfe4fc555350067b8cde740631247e7ddcaf14fd73d2b9be27deb27b7cd1d921c51e595d391d8433c502fa1f1302c056bd9c6a57de0b67c5a2a484337085d7ced02c9e47b301a87bc101297aa7cdaee8b309177fdb6158810d932d416b867e37512abd93c45b0e22c1b48dfdce0679f3d1adbb7ba9cbcd3b0be59c9a3b2b20ff8692a51eab05c986e9cb948a1659eab8f422569786da80c3a35ae3ed6c555a4f2d62ac1b8d4d9edee7ac345346e0d1cd6bf841ecbc5a06627c72dfd6fd499", 0xed}, {&(0x7f00000054c0)="91628c2902727ac0c42af8940f0d75573cb6744dd594707216fbbc2b0b71f13900f13336f53b13ad1dfb6356b1eb66996ac9ee129b78ff35b40d46786db57b5813809b1cd5476b43", 0x48}, {&(0x7f0000005540)="e47b267b1227e6f20f22d13b79e8bfd5c7dda8779b811960f01f439f32edc348bc33d1ab2637f76cf9134e2484470f9228c2db6f84d79a6e2bdee2f22d3173adcf3fc283823b2900a29013411edf1f8dcc16f0e59084a0f9ee5df00ec713463114add6ba9a9ac7f0e7ce56a2a83ed42ddb2cae4cde3fee2b47622b40cfcabc106698b93af63e243f2414579f05861cf9a82d71da1790b67f9005e9a158753a00034a01bd8186a0f0589085feddd10a6347851384cdc31db50eaa02a817a967770e841c4de626855680", 0xc9}, {&(0x7f0000005640)="f56b2c0052f2d8482868c2b81958e5957cceb2331fd4d6f5c6c12bfcb934c7212de315641ce90ef1701c00790d3fe38d421f87cc2e4048696eeececcb0797818ad681d042f802d4e10aeb45aa434d992154db47e22357c96e588b7e8b1f24de99825afd0a9347aed4273d49af2809bcc3de2450c389147ca54df55fc4da9c58f4e2422e419abbbc1d247905f010a48e0295e4232d4b3f3bad6e05cdd248a406dfaefcb144fa6ca279f2f6e58c92b0ba7d1492f045ae197871284bccfe2", 0xbd}, {&(0x7f0000005700)="881201c56de285bc04daba555aacd067b29d3198d397b8a26c8f8e6c951915c3d32c8cf267e6c014695ac2e6a13abca146bdadeacae6c32d60857eb971e15bc102e04d19291e7d8678371136b21996ad763e0d929e", 0x55}], 0x6, &(0x7f0000005800)=[{0xd0, 0x102, 0x8, "a57789c4c6ad20887900d6a62342e47318837238bfcd758ee8c51a7366aabb3f8e5c66570e91fad07af7ce23f438ddd760b1143df5848ac723023039a44ba8100ae08a9426b597d7bcedddec06fa0793880682949a14580b62e7356a80d0814a28bd7aee0da0ded57a72d19514094276ee06604026cde8b83a9f82d245c2c9e934090f7d2b8f3bef404dfd6729725bbe3787482152f05f969c676c175090efe1dc58c735511c5eadf2e8adc4b6ea86fbc0d105306607f72dda5ce5"}], 0xd0}}, {{&(0x7f0000005900)=@ipx={0x4, 0x2, 0x4, "7dca8628ddd6", 0x6}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005980)="4ba9b5f8dd65df1aeb89167932a16d4eb0c51c9d212a8cbff0b4b1e35873c49c76354b0ab99b349237b5bf10d89aab23", 0x30}, {&(0x7f00000059c0)="4ac7ea907ebca8c28a824834c078d1905ba50113efd6600886bd8d919244f6701c1c7d5422b79de082a5f4b78026fb1fdfe0e9a30a", 0x35}, {&(0x7f0000005a00)="ec851dec4d7f3d5a15ce201a5a4429b4618aed76c3d37522a50d34de1cf8a5ef90860b315984702719f8c2ef081657fec3577b8eaca12beb49aec271607b1e868d8f377c9d13dfd45b645a107e67563e8b131018f2d7f2404a51c1970b8ee1bbc20f946434318ee807e48d7334ee15e90e00a5fbb3a940917254040ea9e0da7cc0f1384f888cdb662d4d174d8904ffb1a27e522983eaac070af422cca12fad476a65408a", 0xa4}], 0x3}}, {{&(0x7f0000005b00)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005b80)="89d8f2aa3d8d845e97369f5c4d7ff1d0e11c716c39662b0a4c78b344293a90a78b4b0d9b171d71238f829eeba2f6a61a0c4dfcecbfc1d9a146cbb41e120f4cb6d8ccde1e5ea23be1bb5d081d2cc8b7d915b58d5627b19c77b02607f3b0cd7ddf62ed3012dcbfd1cdee7b0eab75f0c3aa1c45e7f2a8f7a06bdeaf5efb99191f9fe38ec3b3027e647daf0c54524c09a4704fdf", 0x92}, {&(0x7f0000005c40)="d1118f5b7c1119fe9f9f441878a70c6b1a5ef2eb6541aae7d4e0b5df464558542011107656d7679fc61c67f968d865d79bf26803f7aede7a76267bd5a57b967bfdb0401aa28ddaf189280fadacf017008192147ddd31b9426ad1e714307d4fe0032977cf9a5ac5d72785f52d25518e908c67e67bbbca5ff31911cb573fc279a6fd5e898efd3e978a28dbd63dcf0bb83e6464dacec9c1da50b2b7", 0x9a}, {&(0x7f0000005d00)="28e3b575be116230dd4d1ceea05b12e9b3dc07aa4bf01a796d216cc3d56953faf76add4e56ecc413d0cdb9a2fe02e3ce51c2e95f665c8788c1b317c23fb3292ad8c1919868945870c3426ceec15405c147fbe17e57a9f19c3df08ede108fbcff0c18d5ba1b45ff54010cd27305c3502fc926967284b67be09afe677dddf95ae799c166af4413537652b86dbb4a025bec7b23754dc601a1fc6108c024374480f22bc76eeef3f02b5a723d8a1ca211c58468edf6", 0xb3}, {&(0x7f0000005dc0)="cea9da0a770568fc6a1107009568d8d1a090ee49ac1a5d113165f2155a6fe5e53ade2ebefa08b66dfc11b2c4c37ea251f57b61c6139d", 0x36}, {&(0x7f0000005e00)="ab43d12386d7db4a80368d20170342048be659414264157d4c1ceb5e3a5fbf6621d6f485e423057cc870686ba504751cb19862eb26f1b59e1bbf944b8a", 0x3d}], 0x5, &(0x7f0000005ec0)=[{0x80, 0x109, 0x0, "1e4cab73e01f553a8a28156ab3d53acdeaeea76acbfe36c5efde02bcf717f65c66391308cea202ae06bdbb209d75a5ba4f00db94e95c9a1d6aba119bd6a208712dd58a4c1a79dd86f1d732ea35dd83d34acce45d40e78afa7581387d338f6121c7a83165664843df231b15b8a4b1fff7"}, {0x80, 0x118, 0x40, "a2fd80acbf472e8cf1f1471002be088576b3e0c3d8aa16498174121e731bf45ac436e23bd61e8dd03c5777bd47356c7f5b3c1145ce85166fafd5d4778a60b5e6a548a45adb3d39182f48b942bfced3c6f27dd85b28174826b1eff5a3e7dbd457e1f2ae065e562f2274efe3"}, {0x58, 0x10b, 0x8, "8ff09a319a6d4028ef530d6c71687ab2ad5c55ad9d04c04b3257eb3bec62fcfa462881b0b02a0e78ef8cef387d96151e9da503977e271a7a659c141e28f4447855da6f1ab755deb5"}], 0x158}}, {{&(0x7f0000006040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x4, 0x1, 0x1, 0x4}}, 0x80, &(0x7f00000064c0)=[{&(0x7f00000060c0)="8db56a866b28903ec1a172bea941eef086da336f7f1adf5c7be861186bf7fe8c7f324cf2dc21bb6ea67543be01574dde2a568710a3680ed485236007ad3a899aa99168902b28d29b3394fc6d20579e1906f2bc5befa1019ce57953a51200bbe2e5f7df4bddb3b1a739b5ea0a959b58e2d22d804491c3f6f6384fb3a6f771e1f8b379b34053d9e2f9cc25de9496d1ce958850455d96434d3103a791a503e8d22e8e4f07ff", 0xa4}, {&(0x7f0000006180)="d6e3d10a3235bc22f01c11496b863c968350bb53a26d8599827359fc6569b9551c9f5f88a290e6995daf1e594f8bcc50b8cadca2be4955d57712b16933862e8988fe5c67ff22c45a9122d643b4ac862355c885baf264ad8b88259276d796bd2fae2a8ecae0e4cc00b9dea0be39286ed696fc7cc20f334ffb3ef0616e1ccc1a374a178d8437ba73682c620a7f666bbaa8ac45d860789b842a97ab0eb3c7f72e638355bea093960f5b5143daf7cfd86e08f5b6484ca11e204f9a3ce6b6d72d33472fe2b8e4f6a392ad7a291484d13c25c3b465413b60bd755f308ce97701b9a3e169", 0xe1}, {&(0x7f0000006280)="77ddd9adb7164049ef98cb972a2f38a539d0a7169c1b9fc0f5336bbad792b88e36eea842ae6bc86836484d9ba0a5b798fcb00e174a076538fb5a7bdf7e5e241235951c8cf8d8a27b70544d2b0c154ebb7b426774e1ec9fb88beaf90d78a71eea0f30b1d088246e0717d18beed5bb5548a3eb84c155d74b58f464d7949c455575f36ffbc2a926cb950e56bdd8aa13c7a3e808d910790fb80fd9f07e4d8c470427fc2616162251c6a557", 0xa9}, {&(0x7f0000006340)="3204288be4212e4994fc3697af4f365a18fd8468d23639bb15a3b8a63a31b77a", 0x20}, {&(0x7f0000006380)="8b7537e9b4e907ae6063f868adc9972807f6e20d11d5746f5636f10d90c31743d150eda21f2dac760661f3f793692aa9003cb70a548a8613fa1b6ac77866", 0x3e}, {&(0x7f00000063c0)="57b2667456497fd075186b66cabe2ba5c6916fc11d8fd8faaf973407a050e55ea037a98a28a64b1346e9faf4d5568fc12d9808f0", 0x34}, {&(0x7f0000006400)="aac9be517118cd12cb0aa776143f718be3cf4a3746f731f3e3514c10fdfd3132fd4fce382b112038c3edf703df5fd82b6e9b71b361d2a6c5887e5f0e74de6721b6de30fb5ae45898f7e279087d35022230ffc8abda780a9c6a33cfa136c09768089ba540371768eac37052fc8d28d4bbfa2b858aa81e8f6b27ada97cbf6c6a40eb4336738c229db8", 0x88}], 0x7, &(0x7f0000006540)=[{0x78, 0x116, 0x2, "a57d5b1f6f4238a39289c5e789d1cfffa94559383b45dd4b0136e38b22512957a7509b7b8bc356ce82372cdd721c9ba4d9428a229cc0e2a2ff9939daf249ce4bcd242d05ca660db8b830404ea9e320611c130bccc4e7e009fd0445b027e3df63ea5835dc01"}, {0x70, 0x108, 0x80, "1692f07fa2f8397dd4f08a646d9fbb8344778aa8e3542d2b80bb7a7b9ae161752fd72db4f963ad199cf12731ba8910bdcaae6fb1963ab14b274061b7e90d5407893fc2388c77597c439f1c115a1079b9096bcd8dfe060155d87e"}, {0x58, 0x104, 0xffff, "82226050f3f395b3b9df3652f9f3222384b297dcd3cbb6745f6374d70e13326ad296b7c3344f1bca10d17712ace6c8416ce8ab3d29e6fad00b796c2044284852b1b24a99"}, {0x70, 0x118, 0x5, "525b009dc7dc3a8c42715c5bd0dc7f9db90debcbb8cedb2da876b3a15eaa5c58d67bf846b83f730ca9c4bddd0cafa33db41af6bf6691a4461291eaf9451a01aed1f8b67d6c5a7ca23474a27b2d2a85caa45312d12a428c0f470016d80417"}, {0x108, 0x84, 0x2, "2be50648f579cf3c0f58aa76aa513093e600ac20a0d59dbe23ba803cf296a1be66c22960a3284fa75b206257963a874bb1dee2ab974a6d5b417d62d104ed68da63cc2847ccd5757503134672e1bc4dddbc93ebeae3aa1764bd9941b4555e9fc22bc1c4da17fa40f1f601825ddd0578447f18470629fc556e21a64839b86ea1654a76af69696ff525ef45776f0bdb3df192d5481615d65414c97e12491a533544193f36c33171dda95bdf83d559c107c016eb90ebc6f78929197979550ba31211a13499515ad577db1b995ca060487c6b6d0e693a392b1fe57557ad80844e1b7515113a2f527d56478c1cf9ec60f87dcdcb8c1cf3"}], 0x2b8}}], 0x8, 0x24004801) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000006b00)={0x5, 0x1000, 0x14, 0x8, 0x9, "acd62ca84da99e3f"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000006a00)=""/135, &(0x7f0000003b40)=0x87) socket$kcm(0x10, 0x0, 0x10) [ 574.434156] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.434156] 23:16:18 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000600001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:18 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000700001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 574.553954] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.553954] [ 574.653051] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.653051] [ 574.747716] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.747716] [ 574.779071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 23:16:18 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000800001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 574.793790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.836560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.850839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.882886] device bridge_slave_1 left promiscuous mode [ 574.889547] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.904726] device bridge_slave_0 left promiscuous mode [ 574.910951] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 574.910951] [ 574.926890] bridge0: port 1(bridge_slave_0) entered disabled state 23:16:18 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000900001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 574.963423] device veth1_macvtap left promiscuous mode [ 574.975600] device veth0_macvtap left promiscuous mode [ 574.987378] device veth1_vlan left promiscuous mode [ 574.993081] device veth0_vlan left promiscuous mode 23:16:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41c0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1f, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 575.076847] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 575.076847] 23:16:18 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000b00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:18 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x300}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 575.250962] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 575.250962] [ 575.342824] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 575.342824] 23:16:19 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000001000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 575.484072] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 575.484072] 23:16:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x700}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 575.587336] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 575.587336] 23:16:19 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002300001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 575.830478] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 575.830478] 23:16:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:19 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000002c00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 576.093813] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 576.093813] 23:16:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:19 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000003d00001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x900}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 576.356995] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 576.356995] [ 576.417202] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 576.417202] 23:16:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:20 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000006000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x4}, 0x4) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x1f, 0x5, 0x5ca1, 0x7fffffff, 0x6, 0x800, 0x193e, 0xf14d}, &(0x7f0000000280)={0x19, 0x0, 0x5, 0x8, 0x9, 0x100, 0x8, 0x790}, &(0x7f00000002c0)={0x10001, 0x3, 0x0, 0x9, 0xfffffffffffffffe, 0x80000001, 0x88f7, 0x3}, &(0x7f0000000340)={r6, r7+10000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x8]}, 0x8}) socket$kcm(0x10, 0x0, 0x10) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f0000000400)="8f60eab53ad104a4da05a2a8c11d5a44ed65825f799f81b27de4a1e19c38d4e66ab8d390711d8da41876a9a2017435add2db15630810b6254dff504df2e7d19933", 0x41}], 0x1, 0x5) ioctl$FITRIM(r8, 0x40047211, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000000040)=0x1000) [ 576.635419] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 576.635419] 23:16:20 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000f000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 576.855819] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 576.855819] 23:16:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xe401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:20 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000003001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 577.160908] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 577.160908] 23:16:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x3f, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1f02000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:20 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000005001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 577.369140] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 577.369140] 23:16:21 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000006001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 577.645340] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 577.645340] 23:16:21 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000007001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xff00}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 577.926576] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 577.926576] [ 578.023511] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.023511] 23:16:21 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000009001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 578.203631] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.203631] 23:16:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:22 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x3) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 578.345157] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.345157] 23:16:22 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000b001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 578.505520] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.505520] [ 578.629172] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.629172] 23:16:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:22 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:22 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x58ad}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000240)=""/213, 0xd5}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 578.867767] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.867767] 23:16:22 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000023001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 578.991450] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 578.991450] [ 579.084250] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 579.084250] 23:16:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff00000000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:22 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000002c001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x1000020}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 579.380429] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 579.380429] [ 579.449388] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 579.449388] 23:16:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003d001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 579.653132] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 579.653132] 23:16:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:23 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x2, 0x3, 0x3, 0x2}}, 0x80) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003f001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 579.863143] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 579.863143] 23:16:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000060001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 579.966564] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 579.966564] [ 580.119814] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 580.119814] 23:16:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 580.216763] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 580.216763] 23:16:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000fff0001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x121001, 0x0) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000240)=""/143) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) fcntl$setlease(r2, 0x400, 0x2) r8 = dup2(r5, r1) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000100)={0xaf, 0xf87, 0x2, 0x6}, 0x8) [ 580.553198] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 580.553198] 23:16:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 580.654659] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 580.654659] 23:16:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000fff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 580.763777] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 580.763777] 23:16:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000f0ff001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 580.960467] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 580.960467] [ 581.072241] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 581.072241] 23:16:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r2, &(0x7f0000000040)=0x5, r5, &(0x7f0000000100)=0x7, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000022300000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002f00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000005f00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:25 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)={0x494, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "13331c458362e933e4d7847543195c5815261a6e4d12ca298709e7909dcad249984ee0b763c1939beecce1c88e3f93fe3a120a462dc35eb703c9e13006425f39e78a1b50cbfd234c23bfd751c3ea36aaf57ab0c9fa989410f2ddae41894b52ee06115ab2fee18cfa7fa5f5052247834e2c86c9d907e008f5671da3c36bf69a9df453153d4baeb8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "21bc2778b147144e1fef2ecaf60590821b649feec5ecb436a61776a7055f6795e427417aa2f5e505dd06b91626d92a54dcdc3b23e38ccbe2c961fa49e889a5c17565f4cdf63457bfc5d488e6c7b58a159557bb7b18b9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "2c70e846677c0480b271b821bcd5c9bd1e98ae097280e5551fed672109e224fc76789cb38ce6cec276d84411c443801db6b452143557428645c5d62f3be5a94285943a4dc19d5f3da4a497738dc593eaec019612b6aefa0d0bc6d382407d6e684a0df57dd1a3fff62f068e84b6a27bdb443b0d76be9937594e294445f2b2751a08cc3639a48c3164b6a6c7eee92c0077756eae744e05c873"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1dc200}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':,@@:.:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xad, 0x5, "2fdb6df2f0f61e23b22a0da73d8aaf5f88b1515de1a874605a85a2cc229af0e360f078c0739bf44afefab9dbe4cac15c2411ae95d98c311e6953a7f6267943e8964574afdb391917b8b59eb9b1829a2d1734a2ef00f0497a2a74ee1b6b739e344941b6f64850606718cdd14c295b6c290826b808e7b7845ae6f48e1658f2201c191e935cf4b36a0eff6a09e2c41af20dad5f192292045671f981132f03d3ee12cf9e6835f7500fb3bf"}, @ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "5a85bd11a82b59e90ec4d42896ccd54d7678db0bdfe34b867a8106d5e7e277b5691794e24196c9781506daceddd9a29c46309ba6172e03079cddd71542aa4bc17e1cb4919900b3ed52338acccd161e3be1dbd5ff3020e5ba03a2c51bec5dfef2a3be6432af7936bcf452ee10b6eac31feaac494eb19b864d0cd4e84a35b70e9b87f6169f72ce7f62c8cc3f7828432fd7b7d9f6b4ad8b0892c0a220f523d26ab4515f55deac092a635d5daa6714d3ba4fd067bcc0d354b697116913a0ef92e0e14ca997467f6a254b29614402484d0372b8b9fb1f"}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "431f7dd2050c20c95ff77dbe86a9a0755093cee3762923293c29be0d6f044274967b1bdd3b5ece6ef17e11588eaa64489a02827a1966ab7f5d033173de3ab8d214680e40c8a2e80b"}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "9b7beceb4ea6f8d6eba1e6502a789f018e0680cec9c0156eba4e5e3e9ff6e5ff310fbf6d7833155a0840a8ecba779897acd8de008e936453ab14175e6ccfabd4f369163363c39c71ce6f83e19d41206cb195782f86e247"}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x8001}, 0x20000881) r4 = accept(0xffffffffffffffff, &(0x7f00000008c0)=@l2tp6, &(0x7f0000000940)=0x80) write(r4, &(0x7f0000000980)="c38983c4423d2158ba1a5f704a241a1fe7120f5f96c96891f89c3e294579ef3945f716eea3653e0fd3b7d79d6155140945517da44158cb2b2aaf57e92eb663b2e78f7c6fa70f25e7c661b9f5c23219e62cdee6426ed13865eae9f83821ad602ac10160e5bb069fdfeec213f1560685cfaf699805834bba09e32fcf10fa101aafd29caf273e59b69435ef0599bee8cd84e0a30870e0c55150181361a65b800174cc64e1dbcc861ff741b8562655f93efd15db7905886251c47867b935728b635609297e8edeeebad725a44e1b1f3f609180c220053f922a44c3e6600bc46c80", 0xdf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000000000000, 0xfffffffffffffffe, 0xffffffffffffa1f9, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000000000000, 0x0, 0x0, 0x9, 0xfffffffffffffff9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x200200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000006500000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000003b100000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:26 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004000000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:26 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000008000000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:26 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0x0, 0x38, [], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:26 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000002cf30000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:26 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000030f30000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:27 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000034f30000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:27 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000038f30000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:27 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000040f30000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e20, 0x4a, @private1={0xfc, 0x1, [], 0x1}, 0x6}}, 0x0, 0x0, 0x31, 0x0, "85a4ade1e51b7a06c115f318a6ceffbeae4a135c1895dc950b900938748e90ccef07fa8bafc591534805c88f7646875fd27978426509ba61b6c6c2839d4104ad687760c2274b76cda062a81407d18eb2"}, 0xd8) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:27 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000200000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:27 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000002001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 584.097676] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.097676] 23:16:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x20000001}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:27 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000003001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 584.337415] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.337415] 23:16:28 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000004001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 584.505579] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.505579] 23:16:28 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000005001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:28 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x90000) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x3f, 0x2, 0x20, 0x3, 0x0, 0x443, 0x4110, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xd06, 0x6ae}, 0x2000, 0x101, 0x0, 0x8, 0x7, 0x4, 0x8}, 0xffffffffffffffff, 0xe, r4, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 584.645597] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.645597] [ 584.720287] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.720287] 23:16:28 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000006001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 584.857518] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.857518] [ 584.933301] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 584.933301] 23:16:28 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000007001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 585.161682] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 585.161682] 23:16:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:28 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000008001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xe4010000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 585.429420] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 585.429420] 23:16:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 585.495954] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 585.495954] 23:16:29 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:29 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000009001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xff000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 585.720690] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 585.720690] 23:16:29 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000b001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 585.883828] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 585.883828] 23:16:29 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000010001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 585.952827] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 585.952827] [ 586.124864] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 586.124864] 23:16:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 586.291458] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 586.291458] 23:16:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:30 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000020001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 586.530655] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 586.530655] [ 586.633072] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 586.633072] 23:16:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8001, 0x3, 0x9, 0xfffffffffffffffe, 0xffffe00000000000, 0xffffffff, 0x86, 0x80}, &(0x7f0000000100)={0x5, 0xfff, 0x2, 0x1, 0x7, 0x9, 0x5, 0x400}, &(0x7f0000000240)={0x10001, 0x6, 0x101, 0x0, 0xfffffffffffffffa, 0x9, 0x5e990a07, 0x7}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x100]}, 0x8}) socket$kcm(0x10, 0x0, 0x10) 23:16:30 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000023001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 586.825961] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 586.825961] 23:16:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x100002000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 586.913630] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 586.913630] 23:16:30 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000002c001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x21f, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 587.224661] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 587.224661] 23:16:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 587.348659] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 587.348659] 23:16:31 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000003d001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r4, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0xff, 0x3, 0x9, 0x1f, 0x0, 0x55c, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0xf54}, 0xc800, 0x2, 0x9, 0x8, 0x0, 0x2, 0x1}, r5, 0xf, 0xffffffffffffffff, 0x0) [ 587.516259] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 587.516259] 23:16:31 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000060001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xa02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 587.726508] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 587.726508] 23:16:31 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000f0001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 588.039918] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 588.039918] [ 588.160391] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 588.160391] 23:16:31 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000031000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x288) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x7f}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x2, 0x6, 0x8000, 0x6, 0xff, 0x0, 0x1fd}, 0x1c) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x1a1100, 0x0) fchdir(r6) pselect6(0x40, &(0x7f00000000c0)={0x1af, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socket$kcm(0x10, 0x0, 0x10) 23:16:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:32 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000051000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:32 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000061000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:32 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000071000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:32 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000091000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:32 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:32 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000201000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) dup(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:33 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000231000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:33 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000002c1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:33 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003d1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:33 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003f1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:33 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000601000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:33 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000fff01000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:34 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000fff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:34 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000f0ff1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:34 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000004000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:34 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000008000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:34 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x20800, 0x12) dup3(r0, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) ioctl$FITRIM(r2, 0x40047211, &(0x7f00000000c0)) openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x0, 0x1f, 0x4, 0x80000001, 0x2, 0x3, 0x823}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x1000, 0x3, 0x2}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:34 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000000b000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f02, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:34 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000fff000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000040000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000080000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b0000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000100000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000e00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000240)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="7fe4f8b9cfffcf70c86be7dfacb55b3bb6f383523670b17e8888b3601226ef618fb20661c6310ab165a66b7cd4f9ab023c748fc1c1c847171edcfd588d5e8306639c6725527a", 0x46}, {&(0x7f0000000340)="0293f1370b356c85442cb6551d12d7edf22e7a4710b208768919180142f9faa6783cfe713973cd0dc955f41b256df6fd59847a759288ab81ebf6b453e2ea52ee37c8000621f7fce4e86bac77978cb5311de8c9aae1dd3276b4853f6c05dbcb48445f9f5a884f365f208e880a033f5a29dcf0347d38e9", 0x76}, {&(0x7f00000003c0)="557119fcdff8e83d5cc921bf591588fc0e4c4eea1acbd45001968f1153cc98375a1495760fba91095070277afdf71e2bd1a23f55fb080c50acbedbdf4a7f42e028cd6b62b6b970", 0x47}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a0000000001b0000880000000700000071dc24423e8031fc661ec2b3d5ab9bd1628c2862cb6ecfa956fe80b39833ccd5920c0d4de82779a02bdadee84d9da836a3bce9e298b8ce976dc2579db9dd843be618d3a9904fb410fbe80e4f7374242eb033b792d1fbc4202f87ac06a7af9ef73369b2c1c76f61a5c1540fa801896351c53e3f1ee73f5331ccb8b1677be4fc674c13ef5fd4e4a2693a888de291000000"], 0xa0}, 0x20044005) write(r3, &(0x7f00000001c0), 0xfffffef3) fcntl$setpipe(r0, 0x407, 0x5d39) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x10000100000000, 0xfffffffffffffffd, 0x400000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:35 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000021000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:36 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000031000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:36 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000041000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:36 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000051000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:36 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000061000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:36 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000071000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:36 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:37 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000081000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:37 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000091000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:37 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000b1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:37 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000101000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:37 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000231000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000040)=0x1, 0x4) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xe401000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:38 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000002c1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:38 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000003d1000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xff00000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:38 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000601000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:38 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000f01000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:38 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000020, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:38 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000022300000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x1, 0x0, 0xee, 0x7, 0x0, 0x81, 0x43004, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f00000002c0), 0x12}, 0x40002, 0xeec, 0x182, 0x5, 0x6, 0x100, 0x81}, 0x0, 0x4, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x5, 0xffff8001, 0x4817d1d9, 0x6, 0x4, 0x3ff, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200), 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0xa3) ftruncate(r4, 0x6) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:39 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002f00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:39 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000005f00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:39 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000006500000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:39 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000003b100000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 596.209048] audit: type=1804 audit(1611616599.811:126): pid=927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir447806210/syzkaller.QqfSsT/212/bus" dev="sda1" ino=15856 res=1 23:16:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x1f35, 0x8001, 0x4, 0x5, 0x8, 0x7, 0x480000000000, 0x1ff}, &(0x7f0000000100)={0x55920e14, 0x8, 0x4, 0x80, 0x4, 0x6}, &(0x7f0000000240)={0x3, 0x7, 0xfffffffffffffffc, 0x5, 0x101, 0xffffffff00000001, 0xfbb0}, &(0x7f00000002c0)={r4, r5+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x800]}, 0x8}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:40 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000000040c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:40 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000000080c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:40 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000200c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000002b00)={'syztnl0\x00', &(0x7f0000002a80)={'sit0\x00', 0x0, 0x29, 0x0, 0x6, 0x5, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, [], 0x1}, 0x7880, 0x8, 0x401, 0x3f}}) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0x40047211, &(0x7f00000000c0)) recvmmsg(r5, &(0x7f0000002880)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, &(0x7f00000003c0)=""/26, 0x1a}, 0x9}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/66, 0x42}, {&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/233, 0xe9}], 0x5}, 0x100}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000780)=""/81, 0x51}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/28, 0x1c}, {&(0x7f0000001840)=""/53, 0x35}, {&(0x7f0000001880)=""/215, 0xd7}, {&(0x7f0000001980)=""/66, 0x42}], 0x6}, 0x3ff}, {{&(0x7f0000001a80)=@sco, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/76, 0x4c}, {&(0x7f0000001b80)=""/105, 0x69}], 0x2, &(0x7f0000001c40)=""/76, 0x4c}, 0x8}, {{&(0x7f0000001cc0)=@vsock, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d40)=""/40, 0x28}, {&(0x7f0000001d80)=""/229, 0xe5}, {&(0x7f0000001e80)=""/29, 0x1d}, {&(0x7f0000001ec0)=""/89, 0x59}, {&(0x7f0000001f40)=""/75, 0x4b}, {&(0x7f0000001fc0)=""/129, 0x81}, {&(0x7f0000002080)=""/19, 0x13}], 0x7, &(0x7f0000002140)=""/99, 0x63}, 0x9}, {{&(0x7f00000021c0)=@nfc, 0x80, &(0x7f0000002480)=[{&(0x7f0000002240)=""/186, 0xba}, {&(0x7f0000002300)=""/47, 0x2f}, {&(0x7f0000002340)=""/38, 0x26}, {&(0x7f0000002380)=""/79, 0x4f}, {&(0x7f0000002400)=""/66, 0x42}], 0x5, &(0x7f0000002500)=""/210, 0xd2}, 0x6}, {{&(0x7f0000002600)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)=""/105, 0x69}, {&(0x7f0000002700)=""/76, 0x4c}, {&(0x7f0000002780)=""/128, 0x80}, {&(0x7f0000002800)=""/31, 0x1f}], 0x4}, 0x3}], 0x7, 0x2040, &(0x7f0000002a40)={0x77359400}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='/dev/full\x00') 23:16:40 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f32c0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:40 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3300c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:40 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3340c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:41 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3380c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:41 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000000f3400c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000240)=""/149) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:41 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000200000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x20a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:41 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000400000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:41 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000e00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:41 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002f00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)={0x2a9, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0xae0, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x3, 0x53, 0x5]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x41, 0x80, [@mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x2a, 0x7fff}}, @gcr_ga={0xbd, 0x6}, @peer_mgmt={0x75, 0x18, {0x1, 0x6, @val=0x1f, @val=0x28, @val="8b0b5c55ce2d10f9f3da0de39309eb48"}}, @measure_req={0x26, 0x9, {0x1, 0x1f, 0x3f, "5ef6ea3ca742"}}, @channel_switch={0x25, 0x3, {0x1, 0x1, 0x20}}, @erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x1c6, 0xf, [@random_vendor={0xdd, 0x83, "5fcf30abb0b62fa0736699a52edb6f98c09ca219ca98311ee480f3f5ce9782e72cc6aab5b563e57ffd9d8e56bfc5e1d10bc8c61b2f6e05e5f022b8e743471ee2240fe84a0dd27f608a0f9cfc13b72d285b8686dc543c47cc66c8244697553abb849492ff68f0db2a855b50d620ab200d0750160db567f229bab597b47b7c9ce23e1c0e"}, @challenge={0x10, 0x1, 0xc4}, @fast_bss_trans={0x37, 0xc4, {0xfe, 0x4, "19badaffd3fb8c7ed81b08759abf8d20", "73612e64f17a0e3f5fd87f0a288933504f1172b990b49373992b151bccf5a9fa", "84c0663ab59bf76816ae38e48fdc97ac383c5e9ca3e7635afd5b5ba055545f98", [{0x2, 0x28, "c02b14e3f20d9fc5c0f9eb652a5699e68939afd14806d5259f4ff9ca35ee0aec3fc614ce2cb790f3"}, {0x2, 0x18, "4445cf8f62cf9e63927ebc4b0e4f388c7ebd0e5e5a12d1d9"}, {0x4, 0x1c, "253010e535168d1c1eb971d13e7ffc6d5bbfacbd1d3bb7b30eaaf55e"}, {0x1, 0xe, "bbd5eafaf02e49bbcb610efe0faf"}]}}, @preq={0x82, 0x62, @ext={{0x1}, 0x80, 0x9, 0x7fff, @broadcast, 0x8f, @device_b, 0x1ff, 0x100, 0x6, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1}, @device_b, 0x58}, {{}, @device_a, 0x6}, {{}, @device_b, 0x10001}, {{}, @device_a, 0x3}, {{}, @device_b, 0x20}]}}, @peer_mgmt={0x75, 0x6, {0x1, 0x100, @void, @val, @void}}, @cf={0x4, 0x6, {0x7, 0xff, 0x3, 0x5}}]}, @NL80211_ATTR_BEACON_TAIL={0x132, 0xf, [@ht={0x2d, 0x1a, {0x2000, 0x1, 0x0, 0x0, {0x6865, 0x20, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x9}}, @tim={0x5, 0x17, {0x1, 0x99, 0x3, "a42039eeaebfe139225663193635acbe0c816d10"}}, @ibss={0x6, 0x2, 0x9}, @fast_bss_trans={0x37, 0xf0, {0x40, 0x7, "b1023de1857558ca198e03f13820ccdb", "178a27bf522368c099cb12b4fd2bf63d10b80b88e3efad1a312c70cc032811ec", "1c6eee21555ef6bb34446a8c3269743bc3e23df82f029a19f593a728014dc212", [{0x3, 0x5, "c680c9719f"}, {0x3, 0x15, "ca94d1bda9b8c0fd8402affac224c8b6403ac36613"}, {0x1, 0x21, "51a0aa197196029d7ad3d40d8b877b573f7553411cbcd605843fb53a4d026dbfe2"}, {0x2, 0x22, "7dad0be735116e83146931a96fd90c0414f8082df5c39ac2e02b6a925d4b475685dd"}, {0x2, 0x28, "f488f9cbc3230beea7dddbf589c2afa5110a00"/40}, {0x5, 0x2, "0173"}, {0x3, 0x9, "cd9c3a0ddc9650b393"}]}}, @dsss={0x3, 0x1, 0x2}]}, @NL80211_ATTR_PROBE_RESP={0x730, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x0, 0x3f, 0xffff, 0xfffa, 0x80, 0xbe1, 0x8, 0xffff, 0xe1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0xfffc, 0x6, 0x400, 0x6, 0x7f, 0x8, 0x51c, 0x7fff, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x4, 0x1fe, 0x4, 0xffc1, 0x20, 0x100, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x5, 0x4, 0x80]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0xb0c}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x18, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$kcm(0x10, 0x0, 0x10) 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000005f00000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000006500000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 598.656249] netlink: 645 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000002302000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000b103000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000000b000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000000fff000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:42 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001002000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 599.848757] device hsr_slave_1 left promiscuous mode [ 599.861095] device hsr_slave_0 left promiscuous mode [ 599.878379] team0 (unregistering): Port device team_slave_1 removed [ 599.888312] team0 (unregistering): Port device team_slave_0 removed [ 599.901260] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 599.915087] bond0 (unregistering): Releasing backup interface bond_slave_0 23:16:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/253, 0xfd}], 0x3, &(0x7f0000000500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @mask_cswp={0x58, 0x114, 0x9, {{0xffff90b7, 0x3}, &(0x7f0000000480)=0x7fffffff, &(0x7f00000004c0)=0x9, 0x4, 0x0, 0x100000, 0x7, 0x20, 0xfff}}], 0x70, 0x40}, 0x20000884) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) dup3(r5, 0xffffffffffffffff, 0x80000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:43 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001003000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1e4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 599.949307] bond0 (unregistering): Released all slaves [ 599.967327] netlink: 645 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:43 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001004000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:43 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001005000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001006000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001007000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001008000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001009000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100b000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001010000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001023000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000102c000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000103d000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001060000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010f0000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x41c0, 0x51004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc310, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) r4 = openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r5 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000080)='lp\x00', 0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000002c0)={0x0, r5, 0x3, 0x1, 0x6, 0xa4}) perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x3, 0x0, 0x9, 0x9, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000040)}, 0x219c, 0x9, 0x8, 0x4, 0x100, 0x7, 0x8}, 0x0, 0x6, r3, 0x9) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:45 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f020000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000030c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:45 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000050c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000060c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000070c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000090c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000b0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xa4000, 0x0) ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000240)={0x7425, 0x4, [0xff80, 0x1800, 0x2, 0xfff, 0x1], 0x7}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r5 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000080)='lp\x00', 0x3) close(r5) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000200c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x20000001, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000230c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010002c0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3b) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = dup(0xffffffffffffffff) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000100)={0x3, 0x81, 0x37}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) write$6lowpan_enable(r2, &(0x7f0000000040)='0', 0x1) 23:16:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:46 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010003d0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xe401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010003f0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000600c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010fff00c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x64000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:47 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100fff0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010f0ff0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r5, &(0x7f00000040c0)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1, &(0x7f00000002c0)=""/127, 0x7f}, 0x9}, {{&(0x7f0000000340)=@ipx, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/47, 0x2f}], 0x2}, 0x10001}, {{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f00000008c0)=""/35, 0x23}], 0x5, &(0x7f0000000980)=""/3, 0x3}, 0x2}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000a40)=""/228, 0xe4}, {&(0x7f0000000b40)=""/132, 0x84}, {&(0x7f0000000c00)=""/89, 0x59}, {&(0x7f0000000c80)=""/218, 0xda}, {&(0x7f0000000d80)=""/220, 0xdc}, {&(0x7f0000000e80)=""/129, 0x81}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/154, 0x9a}], 0x8, &(0x7f0000002080)=""/133, 0x85}, 0x1}, {{&(0x7f0000002140)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002380)=[{&(0x7f00000021c0)=""/127, 0x7f}, {&(0x7f0000002240)=""/119, 0x77}, {&(0x7f00000022c0)=""/184, 0xb8}], 0x3}, 0xb7d}, {{&(0x7f00000023c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/58, 0x3a}, {&(0x7f0000002480)=""/2, 0x2}, {&(0x7f00000024c0)=""/154, 0x9a}, {&(0x7f0000002580)}], 0x4, &(0x7f0000002600)=""/38, 0x26}, 0xfd}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002640)=""/47, 0x2f}, {&(0x7f0000002680)=""/228, 0xe4}, {&(0x7f0000002780)=""/73, 0x49}, {&(0x7f0000002800)=""/199, 0xc7}, {&(0x7f0000002900)=""/74, 0x4a}, {&(0x7f0000002980)=""/254, 0xfe}], 0x6}, 0x101}, {{&(0x7f0000002b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002b80)=""/175, 0xaf}, {&(0x7f0000002c40)=""/249, 0xf9}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/38, 0x26}, {&(0x7f0000003d80)=""/28, 0x1c}, {&(0x7f0000003dc0)=""/5, 0x5}, {&(0x7f0000003e00)=""/83, 0x53}, {&(0x7f0000003e80)=""/181, 0xb5}], 0x8, &(0x7f0000003fc0)=""/224, 0xe0}}], 0x8, 0x142, &(0x7f00000042c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r6 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000004300)={0x4, 0x70, 0x8, 0x4, 0x4b, 0xda, 0x0, 0x9, 0x10040, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3f, 0x6, @perf_bp={&(0x7f0000002580), 0x4}, 0x4002, 0x9, 0x3f, 0x3, 0xfb, 0x3f, 0x5fc4}, r6, 0xf, 0xffffffffffffffff, 0x8) signalfd4(r3, &(0x7f0000004380)={[0x2]}, 0x8, 0xc0800) socket$kcm(0x10, 0x0, 0x10) 23:16:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000020c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000030c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000040c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000380)={0x7ff, 0x7ff, 0x93, 0x8000, 0x9, "8ac07c059a8eb741fe6e6e1415c45ba4e59d5b", 0x2, 0x800}) listen(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x4, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r3}) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x44804) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000080)='lp\x00', 0x3) ftruncate(r6, 0x7fffffff) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000020}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000050c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:48 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000060c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = getpid() r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x4, 0xffffffffffffffff, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000070c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000080c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:49 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) ioctl$KDSKBLED(r3, 0x4b65, 0xffffffffffffde7a) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = dup(r1) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req={0x2f2c, 0x40, 0x0, 0xfffffffe}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r7, &(0x7f00000001c0), 0xfffffef3) close(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000090c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000b0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:49 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000100c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0xaab3, 0x0, 0x8f5e}, 0x10) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000230c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010002c0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) fallocate(r0, 0x2c, 0x8001, 0x6) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x9, 0x0, 0x37f, 0x40}}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010003d0c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000600c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:50 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000f00c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000d", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000014", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000017", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000003f", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x9, 0xb11, 0x1, 0x3}) write(r2, &(0x7f00000001c0), 0xfffffef3) r4 = signalfd4(r1, &(0x7f0000000280)={[0x8b1c]}, 0x8, 0x0) bind$packet(r4, &(0x7f00000002c0)={0x11, 0x11, 0x0, 0x1, 0xfa, 0x6, @local}, 0x14) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008000)=[{{&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @empty}, 0x0, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="68d514ada7c3f65b1b6d9e6be92fe65b0eb6e698833aa6155558354b79bce697a0f8c170", 0x24}, {&(0x7f0000000400)="4a68e6dcd379e8c60bd7b4d81218a3b56d1e87e8355d1c0f8bbf902b6007662f9340e11ca896109b37e429a02677eeb4f81d7f065c", 0x35}], 0x3, &(0x7f0000000480)=[{0x1010, 0x100, 0x3ff, "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"}], 0x1010}}, {{&(0x7f00000014c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x5, 0x3, 0x5, "a7214f37c45325b7f541833526c0197469918c54cbd90eba0d33142189fde19b83add4e4fa2ad610e4cae4235475e3189f32f1e68129723d51fd7fc8113721", 0x32}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001540)="404a77e74f94283371dd236b748e27672d11536c1b096438f3b5cc6edb8a0cdd260332b5ee4c31d3befdd0b46dc1bc3a30febee4b278999298a81ea090a38930a4b5c9c7db9816373e3b6a3ed4dfdb67373f", 0x52}, {&(0x7f00000015c0)="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", 0x1000}], 0x2, &(0x7f0000002600)=[{0x48, 0x0, 0x6b6, "18091daacb9b152c68f54a4f4effa67794d337dd6ee5287d0c92f86512489922f0b7d20aca9c3065e422265f6240b1f5de656f97c166fa"}, {0x1010, 0xff, 0x7f, "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"}], 0x1058}}, {{&(0x7f0000003680)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003700)="ae54cfc3b53f2be7dbf0eaa6783d88919f4d49662c82c38b8172327e3f8ec640540291db1ba6f120d1812b1cbd20126843a47a08666f36b290f7438d21b943aa413d13deacfd759e3088951a45e2d9ba0b4d246ef0f18eeec14691f80388dfe444b0731caada4527d8e7ae92bd6abbbcaa92e64aac5e3e2de573e10734eb302d9f4a7697ec54", 0x86}, {&(0x7f00000037c0)="34627ac89edb5a89d87630a3baf62ab965196402cafe02dc89de1bb32140d9f6120aac4978516fb0bea61b3b148b637fca7b19bbeee53490ec99a518fafac17560287b94aad52f5004c19e691a32243083d41dddc87167e7a351b92f1447", 0x5e}, {&(0x7f0000003840)="5510afb4cf41d97fab7b20895ba1abfd49b75c7e47af58dd7b6968e3a68c31d80f602ee4e81e4df788b0bd9f6e7a3786c345c3a8644ce798d62cad88739f2ca0b7d74cdd9eb42bac10a042dd63e557cd9a0457bbd6995dc15e0c31de43da7f5043296bc819e0c9b9dbb1e1185cb3e888163940c3fd1e10313401864c2d538bb14427a8a5ce87710eea5c1cfc4ebc860fb639ee8eac670147", 0x98}, {&(0x7f0000003900)="2696b36651783b59b855ef0d5d85bda3e85bcdbd001733d83b4ba88b98cccb2e3ab68c2dfd67d1675c4513ff05484ab9bbde62eed84023ea82a4cfe0b2b118510cc2ded7fd878f9dbb0c776563726bb3c538f70ead5083712bc170e9be0c76c832bd35b333e7a6fd17f33560ac72de31c637de20d223d775c6c8f373e1ff21d6b6e9e7015a1ea65c4226b229e4202f1390e1ea68e81d07af0029edfe22084c3171c737a00450c0c748fcadbc90dc796596e824da40d084d96edf1d1d5833f4cd78b488118666459d87b3be75a47d7b50fb07136c7d457707d44ec734997c91f10c0038a3d32f8e76c9549d6b5997618349d7afc6be3084", 0xf7}, {&(0x7f0000003a00)="228902e906020d1d203db12b735901f7ef0b7c4f6ab72dd927aaaade99f59d63972c203c32ba18868b55531a5d16b2f656f6af07bdbcbd2878d2bef66b5946408ac47322f225ffe3b6499d6bfd8ea63e4f62c6fd5d779039a751b905bb7bcde9acc2dcfa5ec0a2fa972b702818214d854b4860efaf30be5d779bcd97ea71fb19cfbe3fc725ff71a02df02a7e6c4fc63578b21afc3a35611969b27c73da954276b79ec28a392a0e51574b9064b2b2843079f2bfc171666396f7ba74212d8839b0e3510e490c8ead72d6bd2f507f38a8afb89dc8d4537d291a5f865a3ec2c3e4370c9cf10de5", 0xe5}, {&(0x7f0000003b00)="38eb7bdd745beff29bbfbd493a315f8637be6718f237db153c36428645e9f6e8034f7d957c61532310cf9aa32ce366f374edd7b5832e309a54b16a888148fb085877edd349610e7d2c5108d21d4b17cb6f146b8c5b2014d006882bb08d09ea10b42917e69e1027cdb198afd03fef74bb69c600d6598c3b0d3f96660ef5840e43a0f9c9f55e74d1bc", 0x88}, {&(0x7f0000003bc0)="999d471c70b79743a401546df511e4152c1deae74b8b75029efe46b60f19d5068a81e1ddd38f06314e68eef496152b63324e47f73ff067390c1196a1b9dc1a102e3dfe62066004", 0x47}], 0x7, &(0x7f0000003cc0)=[{0x60, 0x0, 0x7fff, "2aa21b1f447b6e1190c3ec7ad3c58b92a8e007c646019c239a9deaaa0967111bbaa5009b04ea9661f0bc21217540e2f02109838d7484ddf0bec7097babf897273c0f27e03b3388d2cc13"}, {0x80, 0x84, 0x0, "ea41714169028f71a598ef05fb531c530be2ef10f92ee6d97d500e74d6bc65da1eafd6b2c6cd99c32a4b4f6f4243fa022474b23c60208c34d7e19ad7725a9b9b0df54a57b482b6d34d0d94f81bf273305a832a19bbe6d1c6225d35ed4ad763eafbd768e917457a54b6cea8c50bb2a0"}], 0xe0}}, {{&(0x7f0000003dc0)=@phonet={0x23, 0xe0, 0x4, 0x81}, 0x80, &(0x7f0000007000)=[{&(0x7f0000003e40)="c5941d2c712edd0e2d43f9db29c1aade819f91a96cf487df7f4e7bb8146feee0f9f931d02db3352363c03d7a27ae6648019c3417c28c8d1a5e4b2c5157e9ecec73f37cbd264d578d7b7a4e3d96d71f0b22d1c3972e7f96dd7ba135247bf64b30c7982d8185bb3511a4fecfb07f3870df42ef529c5e3daf19ec16d9e1151f4998", 0x80}, {&(0x7f0000003ec0)="f2949f3a179af90f0a3d550d9abff8755f3a15df3843ee8b02071445d10588f9efb331c0ca114b966f1008cb23b1830ed65b3631dd3ab1e87ee665762bc0e5ea5408d6fdef310619f158ae9939418182cfd075a260f5d8db83446719c12ab6acdb1e21c4f97804b9f1ea63c56b823dbc31970ec0ce84504b177179ddd3ebc78935300a7d201338da835c37e9243b2e5b1e03cbbb181c6cda5fea1e45b82122985a9ecb68599b7657c352b2b60a50b19175752e07a31874a453a645984d938c1137b6c1d24329772133dbd8cacac003f9ad0c8f3c4b2491a5b2", 0xd9}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="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", 0x1000}, {&(0x7f0000005fc0)="299fbe4c519dd3000be6e53118710f38d83dc36878f6858345931b22a4966ea3d0e6748191a52a5890bf256323", 0x2d}, {&(0x7f0000006000)="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", 0x1000}], 0x6, &(0x7f0000007080)=[{0x40, 0x119, 0x4, "25fda0299569a108dad30bc9f85f901bd4ad719a725fd6f6debc0724867d146356cf5e6fd57d6d70bcac0a12"}, {0x50, 0x0, 0x10000, "aac80f86ed58c2fab358c785cc3a8b805e8a076f7ed104e1ec7988cbf7c88fadcae16b485df3635dd8b49023178e9f82f81826512ad72cec5d80ca"}], 0x90}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f0000007140)="c922f1a008e885425474a49e8d72f13ca42c96f356234a25df6c62ff89f91e2b89982f61e80ea0dd488af47397776bccab7a2b0551f66546cb3dd5cb086b8cb57011cb5bfe419b193bbbc4a165338109298f", 0x52}, {&(0x7f00000071c0)="b152ca1720b4d140df04400ca375bb29b3614570e55c", 0x16}, {&(0x7f0000007200)="e32bd2b5b81f28de1fa04d3af85e83e4faa555942d633d7fa124e21bda5d502a2520f84ea9bbe077ca51306ea4ea1847e21c657b164259b3646ca14e13ead19fdbef8c21b9ef795f234a6e0702d34edf6c47406db8b8a466bb86a0c3978892cb07862a3182b4f3dc314aefe630778675d6f85e96a1f3da140f7f3cb5b5b41f7289d129bf88db44b3c86af7ddd86bc88b5a105ada7f5af51d6e10adbf34339c4c73a0a6f5ee2d70f97f0f7f48def977dcf5b08f58b7b3a0e10d5369fe41e6315249951809436c192d06f4ff7e32b00b2d", 0xd0}, {&(0x7f0000007300)="45e6d7bced9ef674360a86671637f675c65608d7895f3c6531a03f958b480664e407f4f433318589a8c118a24916", 0x2e}, {&(0x7f0000007340)="b94d9bd71ab2e7ef6d77f8455a34685f2943dca5847662078bec54d9a759e95caee23dfe2ce39489008bb6f61869df90561ef3294ec868f49b07843228ce4c66f0f53a0710ce77004d7f19c21c1d4c8b1e717ba709e93efa81e97ce1c8d99084a2df315230913121d39f3b5b0ae652a2ebfab061ee5e6fed865a0cef16ded231a16beb3aa52b53e92650267e497fb0e6c7ad62c1c82bc0c73b474145f9cacc06e4924dd6092350226de19ed8f63bb02de346f06aacd8d604", 0xb8}], 0x5, &(0x7f0000007480)=[{0xf0, 0x88, 0x3f, "34f60a76de1d2a00606636cf7706bb842396c0508e25be6b7f6fbe03a94b1fc0ca06e0080c68001867665ef05ccbb3b00ad02eb186c8ec33fad75d173e5911f2eca84a12c0759f3cf31aa25c3bb4623cdb6204ef641206ae93657b3a42eb4fb438d39458e18e176ab5b8ac24d818689f582a65be38ff41f940636dd045f366e81dc5dce789733472c12119a89b4d80b3d3752850fdedeed205ab47509a485723365904ce76871d6dbde7e05ed37712ad0b7f24ca607b0235fb5dcb717ab31ecc14d89fa1ef0c7c59e974fb1e50a6467a66d4f8f0026ed5a16ad6410c"}], 0xf0}}, {{&(0x7f0000007580)=@isdn={0x22, 0x9, 0x18, 0x36, 0x1}, 0x80, &(0x7f0000007800)=[{&(0x7f0000007600)="d62222b49cbf077b9b8f5cf099155af2b09cc8000b3b92e9167dffb047ea893caaea97e1fe985c8e5f4caa9e8099ebda65db72baf8def4fda32c7bad0ff60695d658706c4afc8f04480ba6375844eaae773f2592c21033d3d99d5b568da97f5f33cf6330b4e16e8b6e3295a9404b946b2269d8385f86bebf3aaa8fd704ddc1bd903683147e9a3f97c0f1073e6326003457a101cb7c0eaa366826fd2d36ed2b0fbdf1c24d3470214b6e6eab31564efb4888ecd511ab5eaf23aedd75cf707a1ca024de8bb70b9bad96351ae2ca5b928c1a51f4c0421c13681b5dd1cabd58e34adeae", 0xe1}, {&(0x7f0000007700)="1e47c7e6eeba0c1fba61c0dc51e8156f4931b4ac176bef871dbdda65f0db", 0x1e}, {&(0x7f0000007740)="ccba87e65bb78cb1c3572c91381180248a4561888ba53bc3cbb7c5deea41f353f562e31095c67f612eb1369f6cb2c2a2c5d3a3d0a446746b867e7d273be5950a1b4cd69c7b22b75d3cd94d85400448424e11a98a404626ef581a7266f90eac6ef7063e49b7bb8657ee0fb52faad61eb4d7782fdbfc585414c0ba526fcbb4f8f82a8c9ec8471290f06b4420aeec", 0x8d}], 0x3, &(0x7f0000007840)=[{0x110, 0x100, 0x3, "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"}, {0x68, 0x108, 0x0, "8db278f07e13385c0c759d7229bd23f23c8f92a47f2946e8893b9dcf285a07f99b4158d07bc1fc7455d5e05b0238aa84a26ced0c67706bfbe4c2ff4812758e95fc87055dad7d4ac3d04e9bec626435d570416b0013"}, {0x50, 0x11, 0x9e, "2b5de11dfe49ed0895f401fedccb42a43897f15d6387117bca9a4e7a5ed6f63080f83311334c4dc772175e4f0843b555c0b6cd34f005df8bedb6134db0cf"}, {0xf0, 0x109, 0x400, "5894c11baa1178c8b9054f3d875635e29ecb255b3679ada73cce8c077abcb0e981271a2b4daa5238de21f4abf30f29b651224d0e4ae4f1b281c8c9312216ca2653892e998bb5367cc2fa065e6b7dc35b13768fc823c4c3abeefa525e6144865b7d679b9a46fe17f3bf166e6b53cf726eab1e97b42a3085474d2ad717569eb9e673eedd317f28763eb0249082b7c7c4a19454fb6237226ab3009d57dcb01b92af0080d8fef80346cebf511fdb48211de496ff21cdebcab96a069e7ca5f42895bafb702296f31b79fdde93fde8fd648c60cd26c3bffd8520c8037e9789"}, {0xd8, 0x0, 0x7, "9d0a86ef1257d5cf4347b109fe857b431cfa58a6fbcc640a0a42133707c320a28c24d7a3bddb237e0ae9d4430dc52741a6648c06bac6fb29e2431af934d813bfa615caf47ef6903a289d5bbcd5b274538e32adcad001b6a0eaa6f35848d98f07d8a5b703b61de994351559f09e3d7f93fae87fb4ae42a7f7a372f3f4f3a2f3818e6f480586311ee27d11b52e511e6fe464f337fe239f52b8b61fdea168c506999548ebcfaf509bb743113e7f7247a5ee9757a5fcd98911901ed6f5a527412be98a67"}, {0xc8, 0x103, 0x7, "084cb52d8bab7c364dd3897ce7bdbf8f0e532313097b5c5eea2fe5652e2fc564e256771b31347349799f8f723dd344e86305d1476269732d3074ea936e7cd989da06d066be240fe39c90a2989f91e39e6c63ba51b35e6559b976b8bf34cb985dce8de414e0b782b9c1bc251087a0ded641e99169e6dffb7d631d4d0da5acdd697393af0af0270efe06b243dd019bb4ba0cdef529a84fe97bfec006952cd75c07a5f8a9c5a890bb9735751acb3c8cf1b285"}, {0x40, 0x11f, 0x1, "fa3b1684d41339989e2dfb36566b4abd8fb72c1520174a46c7dfd630c3b5d3517d87fa6d977982bdce"}, {0x10, 0xff, 0x5}], 0x4a8}}, {{&(0x7f0000007d00)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @mcast2, 0x400}}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007d80)="4dbc3edd4b5a2c6bada6084e438fc2aa88c1473b03e7153953c088f744a872246d092246390275d93c5f68086acd1d74ca87509aaf002cda09b304", 0x3b}], 0x1, &(0x7f0000007e00)=[{0x90, 0x103, 0x5, "9e8d30a61b6dc96bf7361bace7c98694cef123d72f59b5604cbfa423741301abfc05a98eef07a8fffcfaa707e7e5756eab44554c1476162055db818625b3a4b23f8721122301f5e44762cb11d8400e64cac69b36e98033797358f325b410cffe78ada2ff8e31786b00b527627267d28a69d3d8a53fc530957b"}, {0x50, 0x10a, 0x76a, "81fd16d7b834ecbb371e0953bdabf6358ab08a810eb7d328fed6ce8933db19248181aa9ed68bf000d625ab0f3899bef654990ec7dcfe974892782f8888"}, {0x110, 0x10c, 0x3, "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"}], 0x1f0}}], 0x7, 0x4080) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000005f", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:51 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000065", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100002000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000d", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000010", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000014", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000017", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r6 = mq_open(&(0x7f0000000040)='}(\x00', 0x10408718a45279e4, 0x41, &(0x7f0000000100)={0x5, 0x1, 0x100, 0xfffffffffffffffb}) poll(&(0x7f0000000240)=[{r2, 0x4016}, {r1, 0x2021}, {r0, 0x40}, {r6, 0x4}], 0x4, 0xee) socket$kcm(0x10, 0x0, 0x10) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000005f", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a4653310100000060760000000000000010000065", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:52 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100000fe", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000000100000ff", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x25, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 609.688330] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 609.688330] 23:16:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) r5 = accept(r1, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80) listen(r5, 0x1d5d) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x7, 0x10000, 0x8}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x5f, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa020000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 609.921472] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 609.921472] 23:16:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x300000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:53 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x65, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x20000001}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 610.200119] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 610.200119] [ 610.310787] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 610.310787] 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x7ffff, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 610.433923] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 610.433923] 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x4}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 610.493078] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 610.493078] 23:16:54 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x4}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x2000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x4000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x6000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x6c00}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x700000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x7f00}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:54 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) fcntl$getown(r1, 0x9) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:54 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8002}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8003}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8004}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8005}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8006}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8007}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8008}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x800000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xe4010000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0x0, r4, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffffffffffb}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:55 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8009}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x800b}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8010}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8023}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0x0, 0x38, [], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x802c}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x803d}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x900000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:56 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8060}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xff000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:57 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x80f0}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0x0, 0x38, [], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:16:57 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="04c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 613.799801] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.799801] [ 613.874823] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.874823] 23:16:57 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="0ec4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 614.099300] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 614.099300] 23:16:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1000000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 614.273454] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 614.273454] 23:16:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="2fc4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 614.596235] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 614.596235] 23:16:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="5fc4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:58 executing program 1: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000080dfd9001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 614.853704] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 614.853704] [ 614.977504] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 614.977504] [ 614.990503] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 614.990503] 23:16:58 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="65c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:16:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x4, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8, 0xf32a, 0x9, 0x91f8, 0x5, 0xffffffff00000001, 0x10000}, &(0x7f0000000280)={0x0, 0xfffffffffffffffd, 0x800, 0x4, 0x4, 0x1, 0x80, 0x377}, &(0x7f00000002c0)={0x1800000, 0x80000001, 0x40, 0xfff, 0x8, 0x4, 0xcc3, 0x8}, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x101]}, 0x8}) r7 = openat$incfs(r3, &(0x7f0000000400)='.pending_reads\x00', 0x102, 0x84) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1101184}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2500000000140008006970366772657461703000000000000008000c000100000008000a000000000014001f00fe8800000000000000000000000000019b291fc59e07ae4c52479318f3aa097ba447f2cfeb41d23bbffd28626449a9f17255872764a6fa69e389450bb1024e4eb98d9fd005b6ccac96d308021186f45d6ac78ff9ccb93d8992da78e741f783de01b68d56a235d9230cf7ca0cd9b290d7e4fc6e8faf0ed6d1919debe3b840bae8a4ef7a4cf019969448bf137c90d6"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x14) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$kcm(0x29, 0x0, 0x0) 23:16:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1f02000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 615.224160] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 615.224160] 23:16:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 615.335964] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 615.335964] 23:16:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x100002000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:16:59 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c40a5f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 615.709503] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 615.709503] 23:16:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 615.850267] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 615.850267] 23:16:59 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4255f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) write$binfmt_misc(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xdf) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 615.997107] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 615.997107] 23:16:59 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c42e5f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:16:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x6400000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:16:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x4, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x8, 0xf32a, 0x9, 0x91f8, 0x5, 0xffffffff00000001, 0x10000}, &(0x7f0000000280)={0x0, 0xfffffffffffffffd, 0x800, 0x4, 0x4, 0x1, 0x80, 0x377}, &(0x7f00000002c0)={0x1800000, 0x80000001, 0x40, 0xfff, 0x8, 0x4, 0xcc3, 0x8}, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x101]}, 0x8}) r7 = openat$incfs(r3, &(0x7f0000000400)='.pending_reads\x00', 0x102, 0x84) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1101184}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2500000000140008006970366772657461703000000000000008000c000100000008000a000000000014001f00fe8800000000000000000000000000019b291fc59e07ae4c52479318f3aa097ba447f2cfeb41d23bbffd28626449a9f17255872764a6fa69e389450bb1024e4eb98d9fd005b6ccac96d308021186f45d6ac78ff9ccb93d8992da78e741f783de01b68d56a235d9230cf7ca0cd9b290d7e4fc6e8faf0ed6d1919debe3b840bae8a4ef7a4cf019969448bf137c90d6"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x14) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$kcm(0x29, 0x0, 0x0) [ 616.192871] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.192871] 23:16:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 616.330690] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.330690] 23:17:00 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c42f5f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 616.587936] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.587936] 23:17:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 616.691771] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.691771] 23:17:00 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4655f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:00 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c42e5f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 616.990399] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.990399] [ 617.129375] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 617.129375] 23:17:00 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a46533101000000607600000000000b001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xff00000000000000, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:00 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464020100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:01 executing program 0 (fault-call:8 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 617.412266] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 617.412266] 23:17:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464030100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:01 executing program 1: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x8, 0x400, 0x2, {0x2, @pix={0x3, 0x8001, 0x31384142, 0x5, 0x9, 0x7f, 0x7, 0x20, 0x1, 0x6, 0x0, 0x2}}, 0x7}) r0 = perf_event_open(&(0x7f0000000bc0)={0x4, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x8000, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x8000, 0x41495043, 0x7, 0x101, 0x3, @discrete={0x2, 0xf0}}) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)) 23:17:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) r2 = dup(r0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=0x40) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x1) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000080)='lp\x00', 0x3) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000280)=ANY=[]) dup(0xffffffffffffffff) [ 617.587702] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 617.587702] [ 617.655356] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 617.655356] 23:17:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464040100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 617.720143] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 617.730789] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 23:17:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cpuinfo\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0xc9, @remote, 0xffffff81}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "96fa1096caaa9cb00354cff3ff83baeb"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8895) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000cf000000000000000300703641d59c", @ANYRES32=r9, @ANYBLOB="15540000"], 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) r10 = accept(r2, 0x0, &(0x7f00000004c0)) getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000500), &(0x7f0000000540)=0x8) read(r1, &(0x7f000001a340)=""/102400, 0x19000) [ 617.786905] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 617.786905] [ 617.846095] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 617.846095] 23:17:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464050100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.084431] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.084431] 23:17:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:01 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464060100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.242954] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.242954] 23:17:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 618.393879] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.393879] 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464070100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464080100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.504076] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.504076] [ 618.566451] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.566451] 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464090100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.680982] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.680982] 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4640a0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.731122] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.731122] 23:17:02 executing program 1: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464050100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.824542] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.824542] 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4640b0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 618.878377] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.878377] [ 618.889781] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 618.889781] 23:17:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 619.006249] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.006249] 23:17:02 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080), &(0x7f0000000280)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024ff0f0000000000006f6e6400000000140002800500160000000000050015"], 0x44}}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x20000, 0xc) ioctl$FITRIM(r3, 0x40047211, &(0x7f00000000c0)) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) close(r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r6, 0x0, 0x4ffe2, 0x0) 23:17:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 619.099114] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.099114] 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4640c0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 619.189440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 619.255918] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.255918] 23:17:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:02 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4640d0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4640e0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 619.371103] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.371103] 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4640f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 619.480519] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.480519] 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464100100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 619.566196] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.566196] [ 619.637042] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.637042] [ 619.703600] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.703600] 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464110100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 619.802818] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.802818] 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464120100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 619.870402] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.870402] [ 619.923206] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.923206] [ 619.986737] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 619.986737] 23:17:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xa02000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3, 0xe0, 0x2, 0x7, 0x0, 0x200, 0x100, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6}, 0x200, 0x9, 0x1, 0x2, 0x6, 0x4, 0x101}, 0x0, 0x1, 0xffffffffffffffff, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x3b, 0x0, 0x1f, 0x1, 0x0, 0x8, 0x1080, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x2ad}, 0x54, 0x2, 0x27, 0x6, 0x80000000, 0x8, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$bsg(0xffffff9c, 0x0, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0xc0, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hald_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x28}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:xserver_misc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1c810}, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf000000000000000000fc02000000000000000000000000000005000100010000002000070073797374656d5f753a6f626a6563745f723a77746d705f743a7330001400030020010000000000000000000f6c70852842917bc19d6c73bc0000000000080004000a010101f9ff0200fc0200000000000000000000000000840b78fb6137ec6a21bca6009dfe06ff67737230000000000000737973c3c5ec2b7150827725faff74ecf287837767b79c24e36353656d5f753a6f626a6563745f723a63726173685f6465766963655f743a733000"], 0xd8}, 0x1, 0x0, 0x0, 0x48000}, 0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000ac0)={0x1, 0x2, 0x1000, 0x47, &(0x7f0000000000)="11c3bddf7cf6491aa4bebd102d52440ecd8af4202ec4b1dfa385dc72a294bf876a435159f58a63d2fbff37da258f0551fd83141d3cf02f0f3f62dadaa85f469810cc384421d39d", 0x34, 0x0, &(0x7f0000000140)="a8b29446251267b04f12bfd6a7e17f63b4f1db2c54dbba78e4200de08565ed488ea0d931b473b4ede2456444e2fe0b368f52c920"}) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clone(0x4018000, &(0x7f0000000700)="3d4ab7b8184f211ab644793b635dbe8620a2372a2a44c01af504582d25b4a4edb940528792fb0448ff6fa12c9cff507c6d1fa93cb48ff549c72ae6ee2062ed3be473f67cfa0059255baa7febfae5afcddd2d4a8c58ac7c1118d677b3ddb7aebb534f3a113b2074db0505bd879ef9c1087f24644c945b04047c3243178b2addef660364e2c14326067f854803518aa8698d2af2d7e525ba45a1eb6c287911fc0930cc8dd504fbc6d4382fdcd09bf432fdb57ff6fe9864741c4dbcf7aabd4d0a7973bcf6f46dfbbe", &(0x7f0000000280), &(0x7f0000000440), &(0x7f00000005c0)="be53efa7e6d7ab6a43f15f2475c871466b9da91b") write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x7) 23:17:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464130100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 620.244063] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 620.244063] 23:17:03 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x18, 0x0, 0x3) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r1, 0x80000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000da1000/0x1000)=nil}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x122) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000003, 0x5c831, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:17:03 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464140100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 620.439226] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 620.439226] [ 620.529141] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 620.529141] 23:17:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464150100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 620.696490] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 620.696490] 23:17:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464160100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x39}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x400c1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x4004005) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)={0x458, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x414, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x100, 0x3, 0x4a0a, 0x1ff]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@peer_mgmt={0x75, 0x8, {0x1, 0x1, @val=0x120, @val=0x38, @void}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x86}]}, @NL80211_ATTR_BEACON_HEAD={0x81, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="130fa4d5f655", {0x1, 0x80}}, @ver_80211n={0x0, 0x3f, 0x0, 0x2}}, 0x107, @random=0xdc, 0x1081, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x2, 0xb7, 0x6}}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x7, 0x0, {0x2, 0x3, 0x0, 0x3f8, 0x0, 0x1}, 0x1, 0x1000, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x92, 0x40}}, @val={0x76, 0x6, {0xff, 0x7, 0x14, 0x6}}, [{0xdd, 0x18, "c71c44b1e2c582321b0b146cd15fc702b41a4a9bed5f42d1"}]}}, @NL80211_ATTR_PROBE_RESP={0x1c5, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x3c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x35, 0x3, "c879dbc44368a03692564ee15aab3aeb560ff2c59f7bf014a782d68464781eaea225046da4b5cdb25d12dcae9c49defb6c"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x11b, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0xb9, 0x5}}, @fast_bss_trans={0x37, 0xd0, {0x6, 0x5, "beded01f68c5e2cc340730e3705461df", "ca076a5d37f514d162e8d5db5b664705a17241d306e1d3c477d67418dc6a186b", "dee5dffd31bb593e0ff016be6802d6121ac54b1860b4fbb713bc9970d0401bc4", [{0x2, 0x1e, "2b9941d76c0a1beddc97c9b10c589f512606338011a398a3ba0a343212cd"}, {0x2, 0xa, "7ee0130cd558ed68b4fa"}, {0x2, 0x10, "9ae9a5250d2c65539f07f58a9f45b948"}, {0x1, 0x27, "63f3a64d4322c097c10ea9aff9a7c54dbe37784adc0422af77105225870d7848f7ff457ead67b3"}, {0x2, 0x15, "4a565c6f90eceb038c6b9f6ebd5bef01e3f13b4cc7"}]}}, @dsss={0x3, 0x1, 0x2}, @mic={0x8c, 0x18, {0xd2b, "f27ec903597d", @long="2766b58924a6c4a1a7d6004b83326f45"}}, @random={0x0, 0x20, "cb5af0171401be158e5aea3cc070a686207c5bd17fd52d92debb58975fb695fa"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x4, 0x80, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7ff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0xd89a, 0xfffe, 0x2, 0xc267, 0x400, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x8, 0x3, 0x9, 0x1000, 0x1]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}]}, 0x458}, 0x1, 0x0, 0x0, 0x48001}, 0x11) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x44000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x6, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)={0x44, 0x0, 0x0, 0x70bd2c, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}}, 0x801) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x20000800) [ 620.851856] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 620.851856] 23:17:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464170100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 620.905331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.913023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.970011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.996206] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 620.996206] [ 620.996642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.066029] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 621.066029] 23:17:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07177c2ec5ad00de8f4607"], 0x3}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2411}, 0x40000) r4 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000080)='lp\x00', 0x3) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r6, &(0x7f00000002c0)='dctcp\x00', 0x6) sendfile(r6, r5, 0x0, 0x10000a966) 23:17:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:04 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464180100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 621.261298] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 621.261298] [ 621.310630] audit: type=1804 audit(1611616624.911:127): pid=2809 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir931720068/syzkaller.0RbTJq/143/cgroup.controllers" dev="sda1" ino=15948 res=1 23:17:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000000000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a0313f0e261b9730be27042cf", 0x3a}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1e, 0x5, 0xffffffc1, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'xfrm0\x00', {0x2, 0x0, @private}}) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="541e302fd89dca20ca0b041ee54a3d7c6e17b30e8c3175c1c24c", 0x1a}, {&(0x7f0000000200)="df4142b1eed00532f81886ab6ddfd8792befe0d620e74170db4e125095f47fc81d0b681eee01556a12331d", 0x2b}, {0x0}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="e8000000000000000b01000079000000a6f2949433c2e597ceae37e810bc818a5c0a1e126469f5fd03853bfb111d681570d54703e5a46336dc937fb25f5565566e47bcf11d7b6b38e896b548370d6ca419207b8ace2042fc63417f1a199f9bdf06903171c3000b6bf0d2b6ea024372221d10908f3b604202ee1969c6b37bbafaac6501d4c09fa6a02bd77dbd2dcb7a48fc51a41b93443424b7adf2da75d4cbffa9f5336b75a2c0af6fafaa8045532f0cee00"/204], 0xe8}, 0x1) r4 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev}}}], 0x20}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000003f80)) 23:17:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464190100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 621.487650] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 621.519990] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 621.519990] [ 621.531417] team0: Device veth0_to_batadv is up. Set it down before adding it as a team port [ 621.559144] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 23:17:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4641a0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 621.668007] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 621.668007] 23:17:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4641b0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 621.708654] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 23:17:05 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000080)='lp\x00', 0x3) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000140)={0x10, 0x6, {0x0, 0x7, 0x9, {0x1b9, 0x3a}, {0x200, 0x7f0}, @cond=[{0x2, 0xffff, 0x1, 0x1, 0x7, 0x400}, {0x9, 0xcabb, 0x4, 0xffff, 0x100, 0x9}]}, {0x53, 0x6, 0x1000, {0x3, 0x8}, {0xff, 0x6}, @period={0x5a, 0xfff7, 0xd79, 0x3, 0x101, {0x6, 0x2, 0x4905, 0x1}, 0x1, &(0x7f00000000c0)=[0x3f]}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000013a00)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000240)={0x0, 0x70, 0x4, 0x8, 0x9, 0x1f, 0x0, 0xfff, 0x308, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x0, 0x40}, 0x42181, 0x5, 0x80, 0x5, 0xffffffffffffff00, 0x1, 0x3c54}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) [ 621.771010] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 621.771010] 23:17:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4641c0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 621.881385] EXT4-fs error (device loop1): ext4_fill_super:4446: inode #2: comm syz-executor.1: iget: root inode unallocated [ 621.896127] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 621.896127] [ 621.911089] EXT4-fs (loop1): get root inode failed [ 621.925539] EXT4-fs (loop1): mount failed [ 622.027090] EXT4-fs error (device loop1): ext4_fill_super:4446: inode #2: comm syz-executor.1: iget: root inode unallocated [ 622.039347] EXT4-fs (loop1): get root inode failed [ 622.045016] EXT4-fs (loop1): mount failed 23:17:05 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r2 = getpid() r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x4, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000380)=0xe4) fsetxattr$security_capability(r4, &(0x7f0000000340)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x80000000}, {0x6}], r5}, 0x18, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='devices.list\x00', 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)="b47f91cc5054ea13d34d8cf985d28f7ef8122ba77f599613d59beb27f22f3948a3910271e45ec1014c2775398b8fc66eaa389e4715a1887198493d2ff74dc54169452b3c981d433374a288d3bc9aa8a946c0df030bb9df8125243b60cf8f8f9fbeffff811fa7a824608d9ebbf2fa33d24a79e9174d8819ccf4e14d31849913f6869744acf8ddb5568fef0a41c37bdffe63b18f9c7e2c74385e104b82fc25a5e2a673433ad54165b75b", 0xa9}, {&(0x7f0000000080)="2679d97dcb80646a25ad181ac0e8803a1a520a24b6b5d8dd20b070c3088a1e01a62de41f09118e57a415330015c4db", 0x2f}], 0x2, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, 0xee00}}}], 0x20, 0x8080}, 0xe810) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r6, 0x40047211, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000040)) syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x10001}], 0x0, &(0x7f0000000300)={[{@codepage={'codepage', 0x3d, 'cp861'}}]}) 23:17:05 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4641d0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xe401000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 622.287580] hfs: can't find a HFS filesystem on dev loop1 [ 622.328782] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 622.328782] [ 622.383607] hfs: can't find a HFS filesystem on dev loop1 [ 622.418353] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 622.418353] 23:17:06 executing program 1: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='upperdir=./file1,lower=./bus,workdir=./file0,index=on']) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000200)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x5, 0x0) 23:17:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4641e0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 622.578419] overlayfs: unrecognized mount option "lower=./bus" or missing value 23:17:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464210100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000095}, 0x48040) [ 622.636834] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 622.636834] [ 622.735620] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 622.735620] 23:17:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x28801, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000080)={@loopback, @empty}, 0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 622.798752] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 622.798752] 23:17:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464220100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 622.907080] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 622.907080] 23:17:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464230100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 623.038604] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.038604] 23:17:06 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464240100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 623.090018] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.090018] 23:17:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:06 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xff00000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 623.259008] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.259008] 23:17:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000080), 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40300) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) [ 623.338105] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.338105] 23:17:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464250100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 623.455695] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.455695] [ 623.515356] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.515356] 23:17:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464260100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464270100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() lgetxattr(&(0x7f0000000180)='./bus\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0xe, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x1, 0x0, 0x0, 0x3, 0x55c}, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0598220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc7f7270a6163164000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008500", 0x1041}}, 0x1006) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0xa0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 623.604624] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.604624] 23:17:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 623.750968] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.750968] 23:17:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464280100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 623.905519] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.905519] [ 623.951111] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 623.951111] [ 624.113483] audit: type=1804 audit(1611616627.711:128): pid=3063 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir931720068/syzkaller.0RbTJq/151/bus" dev="sda1" ino=15977 res=1 23:17:07 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464290100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 624.528463] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 624.528463] 23:17:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x64, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4642a0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 624.845231] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 624.845231] 23:17:08 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x100) ioctl$FITRIM(r0, 0x40047211, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x4400, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x700, 0x0, 0x400000, {}, [@IFLA_PHYS_PORT_ID={0x15, 0x22, "8c96b8e012c261f1491741430924035749"}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) [ 624.939714] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 624.939714] 23:17:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4642b0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 624.979426] audit: type=1804 audit(1611616628.581:129): pid=3107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir931720068/syzkaller.0RbTJq/152/bus" dev="sda1" ino=15977 res=1 [ 625.048096] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 625.048096] [ 625.124296] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 625.124296] 23:17:08 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)) r3 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000080)='lp\x00', 0x3) dup2(r3, r0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xffff, 0x2, 0x6}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r8}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={r8, 0x5}, 0x8) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f0000000000)=0x5, 0x4) 23:17:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4642c0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:08 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x191500) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0xff, 0x25, 0x1f, 0x3, 0x0, 0xff27, 0x80004, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x1000, 0x1719, 0x2, 0x8, 0x401, 0xfff7}, 0xffffffffffffffff, 0x3, r0, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000400)=[{&(0x7f0000010000)="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", 0x10c, 0x3fc}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000010400)="ffff0f00fcff0f00000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e0, 0x1000001040}, {&(0x7f0000011700)='\x00'/22, 0x16, 0x4fe0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc0ff5f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000013000)) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x40, &(0x7f00000004c0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}], [{@smackfstransmute={'smackfstransmute'}}, {@subj_user={'subj_user', 0x3d, 'syz0\x00'}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x90, 0x3, 0xfffffffd, 0xb, 0x0, 0x0, 0xfffe}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000008c0)={@in6={{0xa, 0x4e20, 0x2, @mcast2, 0xff}}, 0x0, 0x0, 0x2d, 0x0, "d705f7238b7d84149080fb277a39543b3d0ce4eeebc92dffe3228aa8a1d8a22d2dee2140b01314b29d9abb885edd5135a66ef92cb69b3fa6e83d3b160f5371f2eb7ac3937053c19237d1f41f6edfda3e"}, 0xd8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1302080, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r2, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="2c67726f75705f69643d4bc9cd5fd55209ab2fe567fe4f69c255a00950a9450e46d22f01c8633a7506c8fe29a05ced3b63237c6e4b98f4a83d4306cb9302082ce253d7adc9fb135c6d7fea5c2300e81b1b57e2", @ANYBLOB="2c616c6c6f775f6f746865722c616c6c6f775f6f746865722c646566636f6e746578743d73746166665f752c736d61636b6673726f6f743d2c736d61636b66736861743d6c6f0096", @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYBLOB="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"]) fstat(r3, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000600)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x7) 23:17:08 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4642d0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 625.302680] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 625.302680] 23:17:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 625.445998] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 625.445998] [ 625.461147] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 625.473050] overlayfs: unrecognized mount option "smackfstransmute=" or missing value 23:17:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 625.537411] device lo entered promiscuous mode [ 625.597354] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 625.597354] 23:17:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x21f, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4642e0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 625.912878] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 625.912878] 23:17:09 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4642f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 626.103508] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 626.103508] [ 626.255941] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 626.255941] 23:17:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464300100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 626.498350] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 626.498350] [ 626.601497] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 626.601497] 23:17:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464310100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 626.737943] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 626.737943] 23:17:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464320100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 626.917481] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 626.917481] [ 627.011893] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 627.011893] [ 627.222272] Y­4`Ò˜: renamed from lo [ 627.231012] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 23:17:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x600, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="8fe7ece0c6d5aaa05c89d1ed0057d6879526702876cedf6156cac5cfd2966cbf30962f8593a34301ba6733f847bd160f0023aec1ce0dcff913509f618a5de1890e72113b0ad0aea1130f3c22f03e83cef1958461b0a46424424a56cfcfa95940982ca76b6f29114bfe37deb6646b8322d46b8a28937a23de5204fd1f7547458438552edfdfc99d03617e9a24483fb820a48583a2f209d3b8567c80256a6031445330d8fec30bf5a0", 0xa8, 0x40, &(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750ebf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x300000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x14008844}, 0x20000800) 23:17:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x26a, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:10 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464330100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 627.306740] overlayfs: unrecognized mount option "smackfstransmute=" or missing value 23:17:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464340100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 627.421468] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 627.421468] 23:17:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x600, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4000}]}}]}, 0x3c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="8fe7ece0c6d5aaa05c89d1ed0057d6879526702876cedf6156cac5cfd2966cbf30962f8593a34301ba6733f847bd160f0023aec1ce0dcff913509f618a5de1890e72113b0ad0aea1130f3c22f03e83cef1958461b0a46424424a56cfcfa95940982ca76b6f29114bfe37deb6646b8322d46b8a28937a23de5204fd1f7547458438552edfdfc99d03617e9a24483fb820a48583a2f209d3b8567c80256a6031445330d8fec30bf5a0", 0xa8, 0x40, &(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750ebf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x300000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x14008844}, 0x20000800) [ 627.516051] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 627.516051] [ 627.595984] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 627.595984] 23:17:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464350100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:11 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0), &(0x7f0000000240)) 23:17:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 627.834578] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 627.834578] [ 627.912973] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 627.912973] 23:17:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464360100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 628.014969] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.014969] [ 628.080204] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.080204] 23:17:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464370100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x700, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:11 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464380100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 628.323364] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.323364] [ 628.422508] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.422508] [ 628.487368] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.487368] 23:17:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464390100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 628.652344] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.652344] 23:17:12 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 23:17:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4643a0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 628.708608] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.708608] 23:17:12 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000000c0)=r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x70, 0x4, 0x94, 0x7f, 0x3, 0x0, 0x80000001, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000480), 0x2}, 0x421, 0xff, 0x9, 0x7, 0x3, 0xffffffff, 0xdec}, r2, 0x7, r1, 0xa) capget(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x7f, 0xa2, 0x1, 0x0, 0x7eb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffd1, 0x15a5}, 0x8000, 0x9, 0x8, 0x9, 0xffffffff, 0x100, 0x4c70}, 0x0, 0x0, 0xffffffffffffffff, 0xa) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000380)=0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x141000, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x8, 0x6, 0x5, 0x6, 0x0, 0xffffffffffffff03, 0x40010, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x7, @perf_config_ext={0x1, 0x40}, 0x8400, 0x8, 0x81, 0x5, 0x4c, 0x1, 0x4f}, 0x0, 0x9, r5, 0x8) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000075, 0x0) [ 628.851146] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.851146] [ 628.950591] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 628.950591] 23:17:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4643b0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 629.135070] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 629.135070] 23:17:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x900, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x700, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:12 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4643c0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 629.414303] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 629.414303] 23:17:13 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r1 = open(0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000580)='./file1\x00', 0x110) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x1) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 23:17:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4643d0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 629.476701] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 629.476701] [ 629.578653] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 629.578653] 23:17:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1e4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 629.671265] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 629.671265] [ 629.738632] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 23:17:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4643e0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 629.930335] overlayfs: 'file0' not a directory [ 629.942433] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 629.942433] [ 629.943769] overlayfs: filesystem on './bus' not supported as upperdir 23:17:13 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x5, 0x0, 0x12, r2}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000140)=0x205, 0xffffffffffffff93) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000000c0), 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 630.042174] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.042174] 23:17:13 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464410100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1f02, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x900, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 630.234041] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.234041] [ 630.308892] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.308892] 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464420100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 630.420369] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.420369] 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464430100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464440100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 630.534388] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.534388] [ 630.571109] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.571109] 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464450100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 630.646526] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.646526] [ 630.757994] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.757994] 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464460100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464470100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 630.894733] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.894733] 23:17:14 executing program 1: unshare(0x20000) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x200, 0x1) unshare(0x42000000) unshare(0x22000180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x9, 0x7, 0x37, 0xe138, 0x14, "b5e8b5a2c5394942"}) unlink(&(0x7f0000000080)='./file0\x00') [ 630.979776] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 630.979776] [ 631.051249] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.051249] 23:17:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464480100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 631.093711] IPVS: ftp: loaded support on port[0] = 21 23:17:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6400, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6400, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 631.179996] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.179996] [ 631.265195] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.265195] 23:17:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464490100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 631.392058] IPVS: ftp: loaded support on port[0] = 21 23:17:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4644a0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 631.476309] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.476309] 23:17:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) [ 631.578922] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.578922] 23:17:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 631.658377] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.658377] 23:17:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4644b0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 631.875169] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.875169] 23:17:15 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4644c0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 631.962559] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 631.962559] [ 632.123708] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 632.123708] 23:17:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xff00, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6a02, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:15 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 632.327458] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 632.327458] 23:17:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4644d0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 632.548856] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 632.548856] 23:17:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 632.723697] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 632.723697] 23:17:16 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4644e0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 632.836090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:17:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) [ 633.024204] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 633.024204] [ 633.156553] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 633.156553] [ 636.799264] IPVS: ftp: loaded support on port[0] = 21 [ 636.938521] chnl_net:caif_netlink_parms(): no params data found [ 637.003479] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.009943] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.017961] device bridge_slave_0 entered promiscuous mode [ 637.025744] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.033790] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.041413] device bridge_slave_1 entered promiscuous mode [ 637.060625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 637.069992] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 637.091046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 637.098627] team0: Port device team_slave_0 added [ 637.104944] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 637.112862] team0: Port device team_slave_1 added [ 637.130699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.137176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.163202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.175004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.181713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.207873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.219070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 637.226948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 637.247943] device hsr_slave_0 entered promiscuous mode [ 637.253758] device hsr_slave_1 entered promiscuous mode [ 637.259956] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 637.268659] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 637.343329] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.349976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.357144] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.363696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.402659] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 637.408749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.419455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 637.430465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.440116] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.447780] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.457019] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 637.468716] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 637.475429] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.486287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.494104] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.500639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.512891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.520701] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.527253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.543809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.552306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.564098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.577284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.588848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.599670] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 637.607553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.623020] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 637.630769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 637.637904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.649375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.665353] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 637.677434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.720829] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 637.728432] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 637.737251] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 637.749064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.758811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.766650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.777359] device veth0_vlan entered promiscuous mode [ 637.787780] device veth1_vlan entered promiscuous mode [ 637.794246] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 637.804628] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 637.818741] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 637.828631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.837117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.846423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.857200] device veth0_macvtap entered promiscuous mode [ 637.864097] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 637.873460] device veth1_macvtap entered promiscuous mode [ 637.883674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 637.893631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 637.904915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 637.915076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.924297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 637.934483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.944102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 637.953912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.963188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 637.973016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.982309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 637.992241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.001353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 638.011795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.023236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.030612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.040590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.054561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.065368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.077308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.087133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.096332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.106130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.115719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.125551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.134873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.145166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.154551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 638.164392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.175213] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 638.182289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.189706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.198026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.327051] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 638.337960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.356013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.366981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 638.378222] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 638.386217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.395397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.403764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.499608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:17:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:22 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4644f0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xff00, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 638.892058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:17:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa02}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000031ec0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200"/45], 0x48}}, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0x40047211, &(0x7f00000000c0)) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0xa0, 0x28, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0xe}, {0xd, 0xa}, {0x4, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x3}}, @tclass_kind_options=@c_cake={0x9, 0x1, 'cake\x00'}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x3f}}, @TCA_RATE={0x6, 0x5, {0x20, 0x1}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xffff0022}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}, @TCA_QFQ_LMAX={0x8, 0x2, 0xb19f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7fffffff}]}}, @tclass_kind_options=@c_tbf={0x8, 0x1, 'tbf\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000240007050000001f0000000005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newroute={0x30, 0x18, 0x8, 0x70bd2b, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x2, 0xfd, 0x1, 0x103, 0x4, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x27, 0xf8, r8}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}}, 0x800c800) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xfff2}}}, 0x24}}, 0x0) [ 638.982267] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 638.982267] [ 639.017887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:17:22 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464500100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 639.031222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.077195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.089622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:17:22 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) open(0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xe0) fallocate(r3, 0x0, 0x0, 0x8020001) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0x40047211, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0xdc8bc39f9eeeb508, 0x70, 0x3, 0x1, 0x2, 0xe0, 0x0, 0x1, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x1, 0xb4, 0x6, 0x1ff, 0x1f, 0x4}, 0xffffffffffffffff, 0xa, r4, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x8) [ 639.162103] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.162103] [ 639.220836] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.220836] 23:17:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464510100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:23 executing program 1: r0 = semget(0x3, 0x2, 0x340) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x7b80, 0x800}, {0x2, 0xff80}, {0x3, 0x81, 0x1000}, {0x7, 0x200, 0x1800}, {0x0, 0x7, 0x800}, {0x3, 0x6, 0x1000}, {0x1, 0x9, 0x1800}], 0x7, &(0x7f0000000080)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) mmap$xdp(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r2, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) shmdt(r1) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 639.439939] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.439939] [ 639.528535] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.528535] 23:17:23 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x81, 0x1f, 0x0, 0x0, 0x3, 0x8028, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf4d8, 0x3ec53d3d0d7872ca, @perf_config_ext={0xfffffffffffffff3, 0x7d}, 0x0, 0x100, 0x4, 0x0, 0xfb, 0x1, 0x8}, r2, 0x5, r0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c004) 23:17:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464520100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 639.632779] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.632779] [ 639.675036] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.708682] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 23:17:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000020, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464530100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x1000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 639.839846] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.839846] 23:17:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@random="c902", 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x20000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x200001, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f00000003c0)) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x410080, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="100016800c00038008000100", @ANYRES32=r5, @ANYBLOB="080001080000000000c4000000"], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000000000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="08e33e174ced5d12fe7286a2c0538c00c3007090480488dbdb1fa1462f98f452033908000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20000010) 23:17:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464540100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 639.919783] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 639.919783] [ 640.028861] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 640.028861] 23:17:23 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000040)={[{0x9, 0x6, 0x5, 0x75, 0x7f, 0x20, 0x70, 0x2, 0x0, 0x7, 0x9, 0x3f, 0x270}, {0xfffffffb, 0x6, 0x40, 0x7, 0x1, 0x80, 0x4, 0x8, 0x7f, 0x9, 0x9, 0x9, 0x2}, {0x7, 0x2, 0x81, 0xa1, 0x0, 0x5, 0x6, 0xfb, 0x9, 0xa3, 0x3, 0x7f, 0x8}], 0x752a}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="16002c8008000000000000000800000000800000"], 0x30}}, 0x0) dup2(r4, r0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 640.095606] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 640.095606] 23:17:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464550100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 640.238519] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.247644] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 640.247644] 23:17:23 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464560100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:24 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x11a, 0x10000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f000001a000)="000000000000000000000000000000000000000000000000000000010000000000000007000000000000000200000000000000b00200000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00700000000000000010000000000000006000000000000000200000000000000b00500", 0xfc}, {0x0}, {0x0}, {0x0, 0x0, 0x4514000}, {0x0}, {0x0, 0x0, 0x4527840}, {0x0, 0x0, 0x45279e0}, {0x0, 0x0, 0x4527e40}, {&(0x7f000001e500), 0x0, 0x452be60}, {0x0}], 0x0, &(0x7f0000003d00)={[{@clear_cache='clear_cache'}, {@discard='discard'}, {@space_cache_v2='space_cache=v2'}]}) syz_mount_image$afs(&(0x7f0000000080)='afs\x00', 0x0, 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000940)}], 0xca36bc18bfe0ccb4, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c6673636febed855e88fdfd7fce19f54d106b1d4f6e746578745f978d8c61646d5f75"]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000400)=@v2={0x5, 0x0, 0x2, 0x5, 0xbe, "6ab08a1e193d42d96b4df486ad015c1ee900236b247d48bf3ed38336eb1bf12bc738162fdfcfc65e94f830ae3e4e69fa1f0a67a29e395c0c536398199b38975e80b12e67a2f899e90fcf605b1bf8dd6ecdd92c40e14fd2e17dfa17bf70bee81c4fcd6cf8c786a51c06e4a31f5cb6fb7663f5352267c1c8c324f7fbf2d1bbe7f4e7c260d00cab75fe86f0476e449bdde2ce6594a24a481d84d74add7e8d2eb7b0b878f0ca25ed66e8ba7b83b3e42c9f18b714607fec84453ac90e971468ec"}, 0xc7, 0x1) [ 640.429354] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 640.429354] [ 640.493018] BTRFS: device fsid d6f70555-1344-4eb2-9114-5d244e3be009 devid 1 transid 7 /dev/loop1 [ 640.511054] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 640.511054] [ 640.523656] BTRFS error (device loop1): unsupported checksum algorithm 1 [ 640.532321] BTRFS error (device loop1): superblock checksum mismatch 23:17:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000020}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 640.576834] BTRFS error (device loop1): open_ctree failed [ 640.724040] BTRFS error (device loop1): unsupported checksum algorithm 1 [ 640.732030] BTRFS error (device loop1): superblock checksum mismatch [ 640.740470] BTRFS error (device loop1): open_ctree failed 23:17:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464570100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x8065135e4acfe6d5, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x24, 0x70, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x7800, 0x0, 0x864d}}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newroute={0x50, 0x18, 0x801, 0x70bd26, 0x25dfdbfe, {0x2, 0x10, 0x20, 0xdd, 0xfd, 0x1, 0xfe, 0x9, 0x1800}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x20, 0x1}}, @RTA_IIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x1c61ff32}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8c41) [ 640.878946] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 640.878946] 23:17:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464580100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:24 executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) r0 = getpgid(0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/196) perf_event_open(&(0x7f0000000700)={0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1a020}, r0, 0xa, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) creat(&(0x7f0000000240)='./file0\x00', 0x0) acct(&(0x7f00000000c0)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r1 = gettid() tkill(r1, 0x1000000000016) [ 641.067733] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.067733] 23:17:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464590100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 641.178526] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.178526] [ 641.244465] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.244465] 23:17:24 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645a0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 641.300646] Process accounting resumed 23:17:25 executing program 1: getgroups(0x2, &(0x7f0000000100)=[0x0, 0xffffffffffffffff]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x3, 0x7, 0x7d, 0x3, 0x0, 0xfffffffffffffffa, 0x10420, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x1010, 0x8000, 0x7090f64a, 0x1, 0x0, 0x49, 0x8}, 0xffffffffffffffff, 0x8, r1, 0x2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0xfff, 0x4}) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000840)={[{@gid={'gid', 0x3d, r0}}]}) [ 641.409078] Process accounting resumed [ 641.413078] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.413078] 23:17:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645b0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 641.540109] hfsplus: gid requires an argument [ 641.545494] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.545494] [ 641.557285] hfsplus: unable to parse mount options [ 641.601928] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.601928] 23:17:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 23:17:25 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x88004) listen(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000006d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe) sendmmsg$inet(r2, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0}}], 0x500, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={[], 0x11}, 0x80}}}, 0xb) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) socket(0x23, 0x805, 0x0) 23:17:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) 23:17:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645c0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 641.830164] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 641.830164] 23:17:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 23:17:25 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x2) unshare(0x40000000) keyctl$session_to_parent(0x12) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000100)="b4d18efd6ec421eae46974c3b7bea09ce746060b89fcba9349ab4ead69e616dc74471e853eed23dd0d6f69a5bdffa128ba32b560a1f3d2a322df5a56e50905c8954917feda0d17a5c8f293af8205d500b58b53c88a3efb1eeab49261c115d8de5256bbc7710acda4e2483a9667d059b2658f9e3c21e8900b0b16467de61ce4fa6a0efa7d6912a47215b3f7c1", 0x8c, 0x8020000, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0x50}], 0x1, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40002123) unshare(0x8040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40400) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10002, 0x10) 23:17:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 23:17:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645d0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 642.032334] IPVS: ftp: loaded support on port[0] = 21 [ 642.118073] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 642.118073] 23:17:25 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645e0100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 642.371732] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 642.371732] 23:17:26 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c464650100040000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) [ 642.451456] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 642.451456] [ 642.477622] IPVS: ftp: loaded support on port[0] = 21 23:17:26 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000040)="10c4645f1000000000000b0000000020000000000000020000000080000001000000000000000000000000000001000000d9df80869e8a", 0x37, 0xb200}], 0x0, &(0x7f000006d200)=ANY=[]) 23:17:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7000000, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 642.584511] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 642.584511] 23:17:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$full(0xffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x7000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$kcm(0x10, 0x0, 0x10) [ 642.717814] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 642.717814] [ 642.727915] BUG: unable to handle kernel paging request at ffffffffffffff80 [ 642.735150] PGD 9e6e067 P4D 9e6e067 PUD 9e70067 PMD 0 [ 642.740451] Oops: 0000 [#1] PREEMPT SMP KASAN [ 642.744957] CPU: 0 PID: 4379 Comm: syz-executor.5 Not tainted 4.19.170-syzkaller #0 [ 642.752787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.762648] RIP: 0010:diFree+0x141/0x29c0 [ 642.767159] Code: 28 48 8d 78 80 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 13 22 00 00 48 8b 44 24 10 <48> 8b 68 80 48 8b 44 24 18 4c 8d 6d 04 48 c1 e8 0c 4c 89 ea 48 c1 [ 642.786074] RSP: 0018:ffff8880a0eaf930 EFLAGS: 00010246 [ 642.791492] RAX: 0000000000000000 RBX: ffff8880b50720c0 RCX: ffffc90010558000 [ 642.791515] RDX: 1ffffffffffffff0 RSI: ffffffff82737402 RDI: ffffffffffffff80 [ 642.806238] RBP: ffff888050759568 R08: 0000000000000000 R09: 0000000000000000 [ 642.813689] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888050759568 [ 642.820966] R13: ffff888050759590 R14: ffffffff889abf80 R15: ffff888047871038 [ 642.828856] FS: 00007f1a48eb5700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 642.837440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.843346] CR2: ffffffffffffff80 CR3: 00000000477d4000 CR4: 00000000001406f0 [ 642.850662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 642.858593] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 642.865875] Call Trace: [ 642.868478] ? mark_held_locks+0xf0/0xf0 [ 642.872551] ? do_syscall_64+0xf9/0x620 [ 642.876534] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.881915] ? do_read_cache_page+0xfe/0x1170 [ 642.886419] ? lock_acquire+0x170/0x3c0 [ 642.890411] ? __dquot_initialize+0x298/0xb70 [ 642.894919] ? pagevec_lookup_range_tag+0x3b/0x80 [ 642.899868] ? __inode_wait_for_writeback+0x184/0x1f0 [ 642.905169] ? dquot_initialize_needed+0x290/0x290 [ 642.910115] ? diWrite+0x13c0/0x13c0 [ 642.913860] ? lock_downgrade+0x720/0x720 [ 642.918448] jfs_evict_inode+0x126/0x170 [ 642.922649] ? jfs_write_inode+0x1d0/0x1d0 [ 642.927033] evict+0x2ed/0x760 [ 642.930373] iput+0x4f1/0x860 [ 642.933480] diFreeSpecial+0x63/0x80 [ 642.937197] jfs_mount+0x23f/0x3d0 [ 642.942835] jfs_fill_super+0x55c/0xb50 [ 642.947499] ? parse_options+0xe70/0xe70 [ 642.951593] ? set_blocksize+0x163/0x3f0 [ 642.956200] mount_bdev+0x2fc/0x3b0 [ 642.959935] ? parse_options+0xe70/0xe70 [ 642.963995] mount_fs+0xa3/0x310 [ 642.967379] vfs_kern_mount.part.0+0x68/0x470 [ 642.971893] do_mount+0x113c/0x2f10 [ 642.975539] ? do_raw_spin_unlock+0x171/0x230 [ 642.980077] ? check_preemption_disabled+0x41/0x280 [ 642.985091] ? copy_mount_string+0x40/0x40 [ 642.989317] ? copy_mount_options+0x59/0x380 [ 642.993755] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 642.998772] ? kmem_cache_alloc_trace+0x323/0x380 [ 643.003646] ? copy_mount_options+0x26f/0x380 [ 643.008139] ksys_mount+0xcf/0x130 [ 643.011699] __x64_sys_mount+0xba/0x150 [ 643.015695] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 643.020367] do_syscall_64+0xf9/0x620 [ 643.024197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.029402] RIP: 0033:0x460c6a [ 643.032593] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 643.051590] RSP: 002b:00007f1a48eb4a78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 643.059400] RAX: ffffffffffffffda RBX: 00007f1a48eb4b10 RCX: 0000000000460c6a [ 643.066785] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f1a48eb4ad0 [ 643.074101] RBP: 00007f1a48eb4ad0 R08: 00007f1a48eb4b10 R09: 0000000020000000 [ 643.081377] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 643.089090] R13: 0000000020000100 R14: 0000000020000200 R15: 000000002006d200 [ 643.096357] Modules linked in: [ 643.099545] CR2: ffffffffffffff80 [ 643.102990] ---[ end trace 34d79d6dd80d4899 ]--- [ 643.107748] RIP: 0010:diFree+0x141/0x29c0 [ 643.111896] Code: 28 48 8d 78 80 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 13 22 00 00 48 8b 44 24 10 <48> 8b 68 80 48 8b 44 24 18 4c 8d 6d 04 48 c1 e8 0c 4c 89 ea 48 c1 [ 643.131284] RSP: 0018:ffff8880a0eaf930 EFLAGS: 00010246 [ 643.137020] RAX: 0000000000000000 RBX: ffff8880b50720c0 RCX: ffffc90010558000 [ 643.144280] RDX: 1ffffffffffffff0 RSI: ffffffff82737402 RDI: ffffffffffffff80 [ 643.151657] RBP: ffff888050759568 R08: 0000000000000000 R09: 0000000000000000 [ 643.159985] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888050759568 [ 643.167268] R13: ffff888050759590 R14: ffffffff889abf80 R15: ffff888047871038 [ 643.174532] FS: 00007f1a48eb5700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 643.182756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.189095] CR2: ffffffffffffff80 CR3: 00000000477d4000 CR4: 00000000001406f0 [ 643.196356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 643.203643] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 643.210914] Kernel panic - not syncing: Fatal exception [ 643.217096] Kernel Offset: disabled [ 643.220745] Rebooting in 86400 seconds..