7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8)
sendmsg$xdp(r1, &(0x7f0000001680)={&(0x7f0000000040)={0x2c, 0x4, r7, 0x25}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000280)="c21c695e21324bc242346024c9dc4c6708e8c525b0da727011a276ba20c8309f967d8961c8d4bcff290d686aaea12eeb79f98ddf455420ce090efb18d745eb9bf2a9541f4e6f6e929e4479869df099e9fd2e9b6ff9d43dbd0b33c14a94b5e79fd8b771c0b4bfe0f5f6304240107a2243993764c7f6aaf6ccfb4896b5ef4094132e235e47b3e2bef4e53a667ba04b59c7d6331f4f", 0x94}, {&(0x7f0000000340)="b34b6180fe58ca5c759b12006ca4c11052d6a7b8266a3d61f32ad7a27be286abd04b1ef4fa284abf84d0f1210b4b3ab219ddf02506b17e2c37e0d6030a32bd6ab4192424a640c96feaeed4c5a58ca4bfa618a1f67d3d54ddaecb7f3165d63c38e6a2b64bb7ea9e54fedd7ad941af242638c2bb1833bfa7086ece6300459699141119fe6e2723d4657309ff4334a79d1be70e0e0522ad15cf8971816837ff06a1a54af5176141fc7d40a3cbd4fee258532630fb334e79c70b05ebf0ce19e146029014b6b3e07e11a3793de94906fc411bcfadb573cdd01a49bc880ab057bbc88eaac9a2c81cfe6aa53322ebc8df680c6dcf08f2", 0xf3}, {&(0x7f0000000440)="f03202de97f8a00d0d3a749853ca404920905120dc1c015c96af018f5911dd8badc885f348ea142adfa6753c0297477aa32f2bddcd42f1a83f1ed1428fdc4257563f0b26c1bc309596874761a0727e8ba647ac05071aea2fb74e91db4ac6b12d7335b5d7d9dacc9e0290650410fb7b3bd55cffb16520458825771972949f5e5f329b9bf55ea01fe9ad5ba0a49548f5e0ca0ac7cc", 0x94}, {&(0x7f0000000080)="d3fe86c25e042efa623dbda213a43af2442e96833a3dc9d436601c0b3f6188ab59a8d25402268117eb75af1f", 0x2c}, {&(0x7f0000000500)="78833348eb22e7f471c9e85ccd22554ef04b2d0845c575db7dbcca78ac61020ffae06fb12d712370939501badf3a116b792c78c7b8b7320d76be2c561e2dafca0e3389db76dd040bcc8a7f8c24ab32b647107c9fd8b811da6730e30a8e7fbc4b15d59a54bb3450a4a592724ca13c64099fd30ad59da67e42a8c29ce6c8624295389c9e0b191ad845cb83eb696d2e85096f13538a6c82c81c13cae46e1ddf2557d42c236a99f25b491e7c8ae9d0c8d8457f8eae54670dbc3765b89cc986d753e002cb34f6c238678fc7a91fb66c8c176aec5a9cc73990c99cfa730c01eb9ed0f64b", 0xe1}, {&(0x7f0000000600)="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", 0x1000}], 0x6}, 0x0)

[ 1459.667683][ T6224] x_tables: duplicate underflow at hook 1
04:40:06 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3402, 0x2fe000)

04:40:06 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3302, 0x2fe000)

04:40:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:06 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3502, 0x2fe000)

[ 1459.922143][ T6343] x_tables: duplicate underflow at hook 1
04:40:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1460.185719][ T6356] x_tables: duplicate underflow at hook 1
04:40:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, 0x0, 0x0, 0x0)

04:40:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3602, 0x2fe000)

04:40:14 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24e, 0x2fe000)

04:40:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:14 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
fcntl$getownex(r0, 0x10, &(0x7f0000000000))

04:40:14 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000000)="abebf84c3137a9358e4eaf9dc7ea093a125dfba5123f5ad87a2263f55df406b1533147930ca71ca32f539704d1444551491a02478e"}, 0x20)

04:40:15 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24d, 0x2fe000)

04:40:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:15 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3702, 0x2fe000)

[ 1468.397552][ T6508] x_tables: duplicate underflow at hook 1
04:40:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, 0x0, 0x0, 0x0)

04:40:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1468.621058][ T6523] x_tables: duplicate underflow at hook 1
[ 1468.639132][ T6521] x_tables: duplicate underflow at hook 1
04:40:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, 0x0, 0x0, 0x0)

04:40:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3802, 0x2fe000)

04:40:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:21 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd6d, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0xfffffffe, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000180))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000040)=0x2)

04:40:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:21 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0xa20000, 0x1, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @ptr=0x1}})

04:40:21 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r8}, 0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={<r9=>r8, 0x5, 0x3f, 0x2040}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r9, 0xffff}, &(0x7f0000000180)=0x8)

[ 1474.452868][ T6544] x_tables: duplicate underflow at hook 1
[ 1474.456590][ T6543] x_tables: duplicate underflow at hook 1
04:40:21 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24c, 0x2fe000)

04:40:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3902, 0x2fe000)

04:40:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1474.852523][ T6723] x_tables: duplicate underflow at hook 1
[ 1474.995520][ T6788] x_tables: duplicate underflow at hook 1
04:40:29 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r8}, 0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={<r9=>r8, 0x5, 0x3f, 0x2040}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r9, 0xffff}, &(0x7f0000000180)=0x8)

04:40:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:29 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3a02, 0x2fe000)

04:40:29 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x100, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe612}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54c1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x161}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x6679c4524d70da19}, 0x10)
r5 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

[ 1482.681130][ T6804] x_tables: duplicate underflow at hook 1
[ 1482.782239][ T6809] x_tables: duplicate underflow at hook 1
04:40:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1482.838927][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1482.873461][ T6821] x_tables: duplicate underflow at hook 1
04:40:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:29 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3b02, 0x2fe000)

04:40:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, 0x0, 0x0, 0x0)

[ 1483.047306][ T6936] x_tables: duplicate underflow at hook 1
04:40:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1483.187789][ T7160] x_tables: duplicate underflow at hook 1
[ 1483.329841][ T7165] x_tables: duplicate underflow at hook 1
[ 1483.571445][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
04:40:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:36 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3b82, 0x2fe000)

04:40:36 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x0)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:40:36 executing program 4:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x10001, 0xa802)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180)={0x1})
r1 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x0, 0x7, 0x200, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9c0901, 0x4, [], @p_u16=&(0x7f0000000140)=0x7}})

[ 1490.045808][ T7179] x_tables: duplicate underflow at hook 1
04:40:36 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x585102)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:40:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x246, 0x2fe000)

04:40:37 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x244, 0x2fe000)

04:40:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3c02, 0x2fe000)

04:40:37 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x100)
openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x400042, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x5, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008850)
ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000600)=0x3)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x9b0000, 0x1, 0x8, <r4=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200200, 0x0)
r6 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x803, 0xec000)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000580)=0xc)
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r8}}]})
getgid()
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x40000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@access_any='access=any'}, {@dfltgid={'dfltgid'}}, {@version_9p2000='version=9p2000'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@access_uid={'access'}}]}})
getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000180)=""/253, &(0x7f0000000040)=0xfd)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)

04:40:45 executing program 2:
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
accept(r0, &(0x7f0000000300)=@ethernet={0x0, @random}, &(0x7f0000000040)=0x80)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
getsockopt$EBT_SO_GET_INFO(r1, 0x84, 0x80, &(0x7f0000000200)={'filter\x00'}, &(0x7f00000000c0)=0x78)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3ff}], 0x1c)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000280)={0x3})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
write$P9_RREAD(r4, &(0x7f0000000140)={0xa9, 0x75, 0x2, {0x9e, "b7967bd0ab6c3856bb6b1474000bbc51a15643aacb3d6678412f9fa9fe5850bb190e4323c5a3dcfdfcc48f73c04ff1d02f2c068ad4fe55eabd5ea6f542a2649e7ed88acf3ce41926cd0d81a8d8b976876f439f42222c117b93b8195698b58d27509f5ebdee0272249d4ef9302c715222a409363a0cbeb2020d07bcf4a019d45719649fb4783606fde5cedebc3be4e400fb4d4e32e9c17c882c4fe5da92eb"}}, 0xa9)

04:40:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3d02, 0x2fe000)

04:40:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3c02, 0x2fe000)

04:40:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x244, 0x2fe000)

[ 1498.358312][ T7440] x_tables: duplicate underflow at hook 1
04:40:45 executing program 4:
syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980913, 0x0, [], @p_u16=&(0x7f0000000040)=0x8f9}})

04:40:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3e02, 0x2fe000)

04:40:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3d02, 0x2fe000)

04:40:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x244, 0x2fe000)

04:40:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3f00, 0x2fe000)

04:40:52 executing program 2:
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
accept(r0, &(0x7f0000000300)=@ethernet={0x0, @random}, &(0x7f0000000040)=0x80)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
getsockopt$EBT_SO_GET_INFO(r1, 0x84, 0x80, &(0x7f0000000200)={'filter\x00'}, &(0x7f00000000c0)=0x78)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3ff}], 0x1c)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000280)={0x3})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
write$P9_RREAD(r4, &(0x7f0000000140)={0xa9, 0x75, 0x2, {0x9e, "b7967bd0ab6c3856bb6b1474000bbc51a15643aacb3d6678412f9fa9fe5850bb190e4323c5a3dcfdfcc48f73c04ff1d02f2c068ad4fe55eabd5ea6f542a2649e7ed88acf3ce41926cd0d81a8d8b976876f439f42222c117b93b8195698b58d27509f5ebdee0272249d4ef9302c715222a409363a0cbeb2020d07bcf4a019d45719649fb4783606fde5cedebc3be4e400fb4d4e32e9c17c882c4fe5da92eb"}}, 0xa9)

04:40:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3e02, 0x2fe000)

04:40:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3f02, 0x2fe000)

04:40:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:52 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01060000", @ANYRES32=<r2=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r4 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)={0xa2092a, 0x0, [], @string=0x0}})

04:40:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:40:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4000, 0x2fe000)

04:40:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3f02, 0x2fe000)

04:40:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1505.989653][ T8160] x_tables: duplicate underflow at hook 1
04:40:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1506.131022][ T8203] x_tables: duplicate underflow at hook 1
[ 1506.284215][ T8212] x_tables: duplicate underflow at hook 1
04:41:01 executing program 2:
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
accept(r0, &(0x7f0000000300)=@ethernet={0x0, @random}, &(0x7f0000000040)=0x80)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
getsockopt$EBT_SO_GET_INFO(r1, 0x84, 0x80, &(0x7f0000000200)={'filter\x00'}, &(0x7f00000000c0)=0x78)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3ff}], 0x1c)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000280)={0x3})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
write$P9_RREAD(r4, &(0x7f0000000140)={0xa9, 0x75, 0x2, {0x9e, "b7967bd0ab6c3856bb6b1474000bbc51a15643aacb3d6678412f9fa9fe5850bb190e4323c5a3dcfdfcc48f73c04ff1d02f2c068ad4fe55eabd5ea6f542a2649e7ed88acf3ce41926cd0d81a8d8b976876f439f42222c117b93b8195698b58d27509f5ebdee0272249d4ef9302c715222a409363a0cbeb2020d07bcf4a019d45719649fb4783606fde5cedebc3be4e400fb4d4e32e9c17c882c4fe5da92eb"}}, 0xa9)

04:41:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4002, 0x2fe000)

04:41:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4000, 0x2fe000)

04:41:01 executing program 5:
syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980913, 0x0, [], @p_u16=&(0x7f0000000040)=0x8f9}})

04:41:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:01 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180))
fcntl$setown(r0, 0x8, r1)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000001c0)={0x1f, 0xca5, 0x596})
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000000)=""/124)

[ 1514.954872][ T8234] x_tables: duplicate underflow at hook 1
04:41:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4102, 0x2fe000)

04:41:02 executing program 3:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01060000", @ANYRES32=<r2=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r4 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)={0xa2092a, 0x0, [], @string=0x0}})

[ 1515.187746][ T8246] x_tables: duplicate underflow at hook 1
04:41:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4202, 0x2fe000)

04:41:02 executing program 3:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01060000", @ANYRES32=<r2=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r4 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)={0xa2092a, 0x0, [], @string=0x0}})

[ 1515.422581][ T8358] x_tables: duplicate underflow at hook 1
04:41:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:08 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4302, 0x2fe000)

04:41:08 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000780)=0xe8)
r3 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14)
r6 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', <r9=>r8})
r10 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r11 = socket(0x11, 0x800000003, 0x0)
bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r12}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f00000008c0)={0x8a4, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff8001}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x3, 0x3, 0x18, 0x3}, {0x1c, 0x5f, 0x1, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x37}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x40864fac}}, {0x8, 0x6, r9}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x2, 0x20, 0x4, 0x7a4}, {0x5, 0x2, 0x85, 0x4}, {0x3f, 0x1, 0x3, 0x9}, {0x1f, 0x20, 0xff, 0x19}, {0x3, 0x20, 0x89, 0x9}, {0x5, 0x10, 0x6, 0x1}, {0x5, 0x4, 0x4e}, {0xaec, 0x40, 0x1, 0x1}, {0x3ff, 0x4, 0x21, 0x30}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x12}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x8a4}}, 0x800)

04:41:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:08 executing program 3:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01060000", @ANYRES32=<r2=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r4 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)={0xa2092a, 0x0, [], @string=0x0}})

04:41:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:09 executing program 5:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
recvmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/189, 0xbd}], 0x4, &(0x7f0000000440)}, 0x101}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000780)=""/79, 0x4f}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/169, 0xa9}], 0x1, &(0x7f0000000940)=""/159, 0x9f}, 0x2}, {{&(0x7f0000000a00)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/249, 0xf9}], 0x2, &(0x7f0000000cc0)=""/5, 0x5}, 0x7}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d80)=""/127, 0x7f}, {&(0x7f0000000e00)=""/136, 0x88}, {&(0x7f0000000ec0)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/80, 0x50}, {&(0x7f0000001040)=""/158, 0x9e}], 0x5, &(0x7f0000001180)=""/215, 0xd7}, 0x1000}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001300)=""/115, 0x73}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/24, 0x18}, {&(0x7f00000023c0)=""/11, 0xb}, {&(0x7f0000002400)=""/238, 0xee}, {&(0x7f0000002500)=""/219, 0xdb}, {&(0x7f0000002600)=""/82, 0x52}, {&(0x7f0000002680)=""/113, 0x71}], 0x8, &(0x7f0000002780)=""/47, 0x2f}, 0x8}], 0x6, 0x100, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000002b00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r7, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)

[ 1522.244241][ T8489] x_tables: duplicate underflow at hook 1
[ 1522.300127][ T8484] x_tables: duplicate underflow at hook 1
04:41:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4402, 0x2fe000)

[ 1522.496329][ T8606] x_tables: duplicate underflow at hook 1
[ 1522.563980][ T8602] cgroup: fork rejected by pids controller in /syz5
04:41:09 executing program 5:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
recvmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/189, 0xbd}], 0x4, &(0x7f0000000440)}, 0x101}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000780)=""/79, 0x4f}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/169, 0xa9}], 0x1, &(0x7f0000000940)=""/159, 0x9f}, 0x2}, {{&(0x7f0000000a00)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/249, 0xf9}], 0x2, &(0x7f0000000cc0)=""/5, 0x5}, 0x7}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d80)=""/127, 0x7f}, {&(0x7f0000000e00)=""/136, 0x88}, {&(0x7f0000000ec0)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/80, 0x50}, {&(0x7f0000001040)=""/158, 0x9e}], 0x5, &(0x7f0000001180)=""/215, 0xd7}, 0x1000}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001300)=""/115, 0x73}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/24, 0x18}, {&(0x7f00000023c0)=""/11, 0xb}, {&(0x7f0000002400)=""/238, 0xee}, {&(0x7f0000002500)=""/219, 0xdb}, {&(0x7f0000002600)=""/82, 0x52}, {&(0x7f0000002680)=""/113, 0x71}], 0x8, &(0x7f0000002780)=""/47, 0x2f}, 0x8}], 0x6, 0x100, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000002b00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r7, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)

04:41:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1522.835904][ T8854] x_tables: duplicate underflow at hook 1
04:41:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:15 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4502, 0x2fe000)

04:41:15 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4402, 0x2fe000)

04:41:15 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x6092d, 0x3ff, [], @string=0x0}})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
r5 = dup(0xffffffffffffffff)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r8}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x4e20, @empty}}, 0xfffffff7, 0x2, 0xffff, 0x0, 0x59, 0x3, 0x3}, &(0x7f0000000000)=0x9c)

04:41:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:15 executing program 5:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
recvmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/172, 0xac}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000340)=""/189, 0xbd}], 0x4, &(0x7f0000000440)}, 0x101}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000780)=""/79, 0x4f}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/169, 0xa9}], 0x1, &(0x7f0000000940)=""/159, 0x9f}, 0x2}, {{&(0x7f0000000a00)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/249, 0xf9}], 0x2, &(0x7f0000000cc0)=""/5, 0x5}, 0x7}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d80)=""/127, 0x7f}, {&(0x7f0000000e00)=""/136, 0x88}, {&(0x7f0000000ec0)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/80, 0x50}, {&(0x7f0000001040)=""/158, 0x9e}], 0x5, &(0x7f0000001180)=""/215, 0xd7}, 0x1000}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001300)=""/115, 0x73}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/24, 0x18}, {&(0x7f00000023c0)=""/11, 0xb}, {&(0x7f0000002400)=""/238, 0xee}, {&(0x7f0000002500)=""/219, 0xdb}, {&(0x7f0000002600)=""/82, 0x52}, {&(0x7f0000002680)=""/113, 0x71}], 0x8, &(0x7f0000002780)=""/47, 0x2f}, 0x8}], 0x6, 0x100, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000002b00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r7, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)

[ 1528.614864][ T8975] x_tables: duplicate underflow at hook 1
04:41:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:15 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4602, 0x2fe000)

[ 1528.942837][ T9100] x_tables: duplicate underflow at hook 1
04:41:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[ 1529.226465][ T9333] x_tables: duplicate underflow at hook 1
04:41:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:23 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23e, 0x2fe000)

04:41:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4702, 0x2fe000)

04:41:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x0)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:23 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x40810)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000011c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x1, 0xe, 0x83900000, 0x1000, "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"}, 0x1009, 0x0)

04:41:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1536.929786][ T9445] x_tables: duplicate underflow at hook 1
[ 1537.058030][ T9452] x_tables: duplicate underflow at hook 1
04:41:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4802, 0x2fe000)

04:41:23 executing program 3:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e1f, 0x9, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x3ff, @remote, 0x803}], 0x48)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x5, 0x25, &(0x7f0000000240)="66b95ca0d50179b04eb8fbab8c1f0b140da08e7916504ab9a25c5a3d2d8962f4534d5d213c"})
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'vlan0\x00', {0x2, 0x4e23, @empty}})
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r4=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000000000905000000000000000000010000080c000480080001400000000208000640000000110c00048008000140000000030c0004800800014000000002380002000c000280050001008800000014000180080001000000000008000200ac1414aa06000340000300000c000280050001003a000000100002000c000280050001002f0000000c000480080001400000000108000340000000ff"], 0x9c}}, 0x2006c001)

04:41:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x0)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23c, 0x2fe000)

04:41:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4902, 0x2fe000)

04:41:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[ 1537.548978][ T9687] x_tables: duplicate underflow at hook 1
04:41:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23a, 0x2fe000)

04:41:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4a02, 0x2fe000)

04:41:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x0)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:32 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRES16], 0x3}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x5c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3c, 0xbe, "01bc8fed55a2ef91349f76bfb8af119c170cdd35918091b9f19f25f7938c10f8aea7d2b8e664ff3a93a3abfd9e70f0a74258472c9ddbde52"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x411}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x0, 0xb10, 0x70bd23, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xd}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000100", @ANYRES32=<r4=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r5=>r4, 0x2}, &(0x7f0000000040)=0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x83, &(0x7f00000002c0)=@assoc_id=r5, 0xffffffffffffff73)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x7fffffff}, 0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r5, 0x7f}, 0x8)

[ 1545.351241][ T9706] x_tables: duplicate underflow at hook 1
[ 1545.515701][ T9718] x_tables: duplicate underflow at hook 1
[ 1545.531546][ T9716] x_tables: duplicate underflow at hook 1
04:41:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

04:41:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4b02, 0x2fe000)

04:41:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4a02, 0x2fe000)

04:41:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

[ 1545.973199][T10068] x_tables: duplicate underflow at hook 1
[ 1546.065568][T10073] x_tables: duplicate underflow at hook 1
04:41:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

04:41:38 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4c02, 0x2fe000)

04:41:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4b02, 0x2fe000)

04:41:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

04:41:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000000)={0x3825f90b43cb11e5, 0x0, {0x8001, 0xee0, 0x8, 0x4bf2}})
fgetxattr(r0, &(0x7f0000000040)=@random={'os2.', '/dev/video#\x00'}, &(0x7f0000000180)=""/148, 0x94)

[ 1551.762567][T10090] x_tables: duplicate underflow at hook 1
04:41:38 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4d02, 0x2fe000)

04:41:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, 0x0, 0x0, 0x0)

04:41:38 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4c02, 0x2fe000)

04:41:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4c02, 0x2fe000)

[ 1552.054917][T10213] x_tables: duplicate underflow at hook 1
04:41:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, 0x0, 0x0, 0x0)

04:41:38 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4e02, 0x2fe000)

04:41:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

04:41:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, 0x0, 0x0, 0x0)

04:41:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4b02, 0x2fe000)

04:41:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x4f02, 0x2fe000)

04:41:46 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x239, 0x2fe000)

04:41:46 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000))

[ 1560.038300][T10454] x_tables: duplicate underflow at hook 1
04:41:46 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x0, 0x16c37ec2f4487b59, 0x4, 0x800, 0x7fffffff, {0x0, 0x7530}, {0x1, 0x1, 0x5, 0x80, 0x1, 0x68, "e5048fc0"}, 0x10000, 0x4, @fd=r2, 0x3, 0x0, r0})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:41:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5002, 0x2fe000)

04:41:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5102, 0x2fe000)

04:41:47 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5002, 0x2fe000)

04:41:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x238, 0x2fe000)

04:41:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x238, 0x2fe000)

04:41:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5202, 0x2fe000)

04:41:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5102, 0x2fe000)

04:41:51 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000080), 0x4)
r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x7ff, [], @string=0x0}})

04:41:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5302, 0x2fe000)

04:41:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5102, 0x2fe000)

04:41:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x237, 0x2fe000)

04:41:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x236, 0x2fe000)

04:41:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5402, 0x2fe000)

04:41:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:41:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xe0, 0x2fe000)

[ 1571.401809][T10673] x_tables: duplicate underflow at hook 1
04:41:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5502, 0x2fe000)

04:41:58 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_id=r6, 0x4)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0xc, 0x0, 0x2, {0x7, 0x1, 0x5, 0x2}})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
sendto$inet6(r3, &(0x7f0000000180)="682ffe692782aacb275970b9304c5115e9c57e00cd8fe3265fda3e19f7a43589da7183c2c4b48c6813b79e3f93181feff721190bf5493cc110b5be9494589a630ff9c462b76e1f32b10014207caa5754f5", 0x51, 0x4010004, 0x0, 0x0)

[ 1571.543757][T10685] x_tables: duplicate underflow at hook 1
04:41:58 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/42, 0x2a)

04:41:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:41:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5602, 0x2fe000)

04:41:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb9, 0x2fe000)

04:41:58 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb9, 0x2fe000)

[ 1571.827939][T10799] x_tables: duplicate underflow at hook 1
04:41:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5702, 0x2fe000)

04:42:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb0, 0x2fe000)

04:42:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb0, 0x2fe000)

04:42:06 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5802, 0x2fe000)

04:42:06 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x1})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0b080111db4bf963f86cb3dd98f549a73c8c1295209af8b123f5f218066f04addadf248a60de46b04517e96097b0234445d64a4710c2793bd1d29aa4e3c20af62f19836f54409801", @ANYRES32=<r5=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xffff, 0x4)
r6 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:42:06 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x5902, 0x2fe000)

[ 1580.057944][T10843] x_tables: duplicate underflow at hook 1
04:42:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x0, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:07 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb0, 0x2fe000)

04:42:07 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x823b, 0x2fe000)

04:42:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

[ 1580.465208][T10905] x_tables: duplicate underflow at hook 1
04:42:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:16 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xa900, 0x2fe000)

04:42:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x823b, 0x2fe000)

04:42:16 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:42:16 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xab0, 0x111000)

[ 1589.314176][T11102] x_tables: duplicate underflow at hook 1
[ 1589.348268][T11101] x_tables: duplicate underflow at hook 1
04:42:16 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000300))
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000))

04:42:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xac, 0x2fe000)

04:42:16 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xaa00, 0x2fe000)

[ 1589.595907][T11224] x_tables: duplicate underflow at hook 1
[ 1589.750026][T11243] x_tables: duplicate underflow at hook 1
04:42:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:25 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xab00, 0x2fe000)

04:42:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0x0, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:25 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xaa, 0x2fe000)

04:42:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xac, 0x2fe000)

04:42:25 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa00000, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
ptrace$cont(0x20, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000580)=0xc)
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r3}}]})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r9}, 0x8)
r10 = accept4$bt_l2cap(r7, &(0x7f0000002e40)={0x1f, 0x0, @none}, &(0x7f0000002e80)=0xe, 0x0)
sendmmsg$unix(r1, &(0x7f0000002f00)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="84d4ea03840d3f521673a0751d7fc0e60f918052217e0832a31e4c5d61d584beec348dc5a6855b717fb18a9005f1", 0x2e}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x80, 0x20004001}, {&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)="4e66ddaa09939b8b2c73d124f25b42e5e1c6edcaea3d96149ac844bab7575ab0c56e9dde0d5902306c472fa2aad39ce356d8361c402c7a31a3ed8240210b91a7cbd506496f024142ff35963aaf", 0x4d}], 0x1, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x70}, {&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000700)="f0d9c4894a0ac918c3b84199b7af2b71148afa5a28e824d9f8f491e09403bf0131a52d17d0d2c44f2eeafae378322be8e997a413423e20caf41c8e7f127ec2522a6e518b3c10f113c2994a224ffae2428b7db007d260cc7fe2c13d43aac9aabf0f4cda", 0x63}, {&(0x7f0000000780)="bb9f936eca46b4202850c7a5524708975487bb517a6b660ed47259fd2f5000c68f903997137d41765fe4fb64af61846ad6f33487e59e6155fc2a7b81179006a0d5d45d91b283df774f69dd6d0fe420c7a9163737203b4766af85ac6d3cf017d93bde3d70bfc499db89a3ae8e1e8be86c6bbffd26b7be26123d0223c357e5e3a1168e4898be7f412eb9b4e915c8777a9932cf4b27bdacaeb76b2a1a0d6bc7733d09e4f690605a833073f520f638d85a9a4866dd184df539806e7e772f900d224a8ede9a16278b15977db85e8f91e91403626d70d15666178107ec3d897362b7df5d806c49f47baba804fad18052f9", 0xee}, {&(0x7f0000000880)="5c85f45dec316727f8d95f1b33982956650ef642bef715857a08d8a395510d46d9e50bc45b099d05e52822c4b7d74b06a4f55cf0a1224a8ce7855ff306dd5bca0d32d45a6b7b65064282bd345574647cf57ad1bf567f89d32a42f599e92d430422a88b32cf9cb024fa786b55a2cf37e03afe1b500234ae07a62ed7564dfff6a78ae227fbabed4a9cee89", 0x8a}], 0x3, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x30}, {&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000a40)="3f5fb1b1cb564efe5f4809fafb4fb753bdaf02291625a5890a5d4d21c27a4cc4dc1d40e1305eb466bc4ca30a35cc6cbf6bdf9b20a6dd4286af3b5e7a777d1cd9ff0f8147eab3647b84e9c3d5b5c561606f88c72766b14b160e33daaf281ea08211834b20f7ba5e51c7119afad29c3abdbf86c5e5ba4923a79b253c1cfc0febe785672625714056090acb3b3f556a43e522c24505ac05a7c3f4d3f8a7a7", 0x9d}, {&(0x7f0000000b00)="d32ae51f553ce1b2bcbe06eb7c751c2786d1aca346c4565da84b625eca70a202a1324b0342e50fe364dff31aa85d55ee3e9b8c4b19dc6f5ace525e9ff7992ee605ffd567f8ea16060f907d9ebbd60516494ca7059a381097d2ffcf112d1c8212ba07a238519a6b0c19eb0e4f425f906c75f8d074d9d85dd65eaa5db905a68392d9fc0736762a0bd45cf488b478f642a8ac542ecc76b05ff65663e9", 0x9b}, {&(0x7f0000000bc0)="18c93979946608df41949827cf4fc530c4d8b3e8f7f5", 0x16}, {&(0x7f0000000c00)="81b4ef8e552b98f86de1135bb4e382053650cfd0e9a01b4ee6f8398625e0a5b40e83170ae1249be2ebad4282ef47f742687087e9396c61086419535874463755e05888a2568857c95a5021757b", 0x4d}, {&(0x7f0000000c80)="60a29580b85e07d420bc5e5a45602ab2cfbf9542f066a647b266febeda2ea36d8bbe4e37500df133c5d93f9f6bf5c964a32a82a78fe7ad540b5c0dd4370c9e40c332561ec36b43f5295686e0183aebed5480899f3dbfa765558185355fdd46581489bd8c47f34979842cc5dd3678292a56bfdd3e65c97236fb6bc209148cd6cd15d81b27afbaddd6c90c87f128df6ec45d6347c9d9ab0adc8244e2f47255ee15a94aa8ced2b8f14827b02aa6533efb0e7c95288effea81ce04376599c34cb4", 0xbf}, {&(0x7f0000000d40)="bdea8aa4e2ecb61de43d71da890c10939df09363ece02a03381bb684950b715a26213fad905a4dca486328cc8a7ef2a3ce0161b6893a08749a9a4228abb3daca1b5d581be9b739e31748dc2d50c6ce937c45a9d7fe8ae6a4077e51ffbf7c79e1598f148ca16407382be47923524b08b0fb6b335ff9d8b92cff6411ac4cd36e6f65c1fdf92b9377cea212813db46134972bfdc50d38dfc9543ba635541b9da91387741cb3dccfeb272d287b2433a3015feb1b56b8954b1ab778c8201c870d8f36b3f7e7c31f617496f7", 0xc9}, {&(0x7f0000000e40)="fc319b6836bb1e48e9c4dcc8e2eee912f574d3ede0e685afb12026cfebe78eab6685e8a81ab9fbef3a03032e5362f8eea9072868a477d05f7bed44fd08da739ca98b0e572776ef312874c5b3241bb39ce55e68051c526889a5958d7f32049167e38c62d54363c056c65993c65fae6b080e1e1719721dc7927b61eef06b9000f3752d67ca587189f11457994d3fcc2c5f3386169e6465e6c425e583202a2d5ef7b4cdff90eb3ab3b06e8c114abb1b2b7166babb8f9a34d794675ef10d8574ab49022d2bf712bc4a54c286e398441e1730fd1403ca17e35ccde2589b27ae81066006eb5c3e5577dbc3fb8e35eae607571f91bf624f963b2947eb5b255a56e4beea812b3711de42df94172abd816b2f1bc032c064f286fa27623e121a62a9fb29d5ff4af55d8d1ea62c1406a1ab044bc5d5037a0ea53561ad4568be30c80c8ada221800c605a609414395765806061d674a69bf632a7fd731cd07f1814ca44dfa226142c1b0cef5fe726627d96f73a45a7f7c8dd60ba3161bb29eed0abd6db2ec66178ab43fa8720848617f99538a2fddb5a323f725b4e3156bddcb747e8ab1a6b56b441ab38ef8c8d2a550e8bb3be1b1f402262825b22be8430abb565aade4e8b6ef595e8991fceb61cf6fd28ca7c89c57fcddf747556bd7330cfc6afbe1214c68f7cba8800fc0ba5a58c8fda2a60081c5dd80ccb6cd6a037c2702c760ce5f2baa6a9a6f5dbaca9b2320a48824bf68900abef09b9dd3db3b0b288ff96094ec6ccf2267578ff04c075f4107665608df4f4572a95d7cd1a9d183fc002dcfd4806ff97905dafac18c1942918376a9902da6622fa8377afd8dcd60a5090d5015290f637b05279ae59e201a92e3ba643b8e5fef963430a29753a5af938cf6c557024fc0046435f1c59e0555b6a11c5d2066a0966e3ff358b778d18336a57ca12dfecb8740b27b1e9ba4143ee0a37e99993e4e8b13d4493706f7826e6732cf1ac0cc48958065fb6b897281af9d9e82b50819ecf6d50772d1a7588e66c2bd603e1da8bb128564a750b8de5cec8ba64aa9c70d807fef0d690ce5f585e03fdbe827cf04f83592dc11b7f1811a7108384c827cfad19265262a0a91925f028112b10d996bb29237eae7ad591d2ffe910b273e7eab1d69e325316f724c19e9b8dc2e15d70f3f5630cfe8b2f3ad6ccc1231ea14d62c9f01b8db547136ead4059db6ddcc8d4e17288e67ba15bcdc22e58b638b797f30ea4123dff8ae940d005e2dac46645f65635f398c92bdc03d80bab63438fb101cd8533a130a6b5372e46d14e66a29e7fb88b99735449962f8bc66fa8fac83bf94483546a3dcfaf5cd711b3062f022e69360afced585172d046ae89641a242bf1a4cc52256709e81a425209ca75cef68f580048189461a43afa1efe65b10eb6dfa5d5f357c895b33ce4a39b7ff24d55b6dc2ecc309c1f804aec82b302897230981f9fa5cbb02c3e2dac5252d5f93fa6764b0c1ebc3b0bb067cf32e72539f59d535c3ae6f2f313d1831513cfbfb07085fca1414358ba5412f2da771b1b57fd41658d51cd6fc86b61df72994cfd992b87302d70a9b28380f3bd10ef4aa25db9d351d58d51829048ef0f8e74a7484c31f66ecff0ca87b6ee8fa9c6d426694024f43afaad6089709636791c17cbbe4030c7b7f165158150ecbf76db475f08a8ffa568e5db862ceaf42262f59617007dfc1adcff8c33b6e3ec29815e804ffeac62bb04683f7e4ff781d6bd2b4fd748d06f9450fda502a5848353d86f9dbc2b9057c56098cee4374e2fd931533d79563fd3ee939819e12b09b24ff480c2bdc3599be13a9f9d6c10d41c7ef861c305dff4357f05216795f57268b36648962c3af159c13535a85c85e94571395e3b5ecd392bc0291474812177fea1c741ddce345a5cf16e04a03229f988b37b50ee74d9add4fd90e8e68f9e7b47837376832cd1b5c0eb245943c31c533c9a19bd48f075c327409e7b090bf00d65dab20f679569cc342cb8355e332daeae1351385251f94aada5e8205daa6f14afd11d45ed3aea5f8da391a80ce2cad8644b6cb72522bce571c486db6ec1f1ce46c1e4914e4c4fb815ff197101ca3331dd3cf997415b1454e259114a5bd8376bd385aeb8d6a32ad8816161d62156434c39ba821f40dc22ce2ec77dec32323880d44f6507b2e6741e7bdd3326ec842eeab90f271633c8dcc5880517459c7ac47256ecc5a6fb372004203723c1839d0d0f5a82f5b84260a209e7e919357dc0f0e78d807b585c911fdbf00b760f17dc49b72b3b967aed5dc071b013cd8cc0e0de3989d39ffe03e10e5bde7d1d209ea23fbab9753fd5c95926015c37263067f00e180394695ca47e3a6b508a9cc9620bff13def8efd5df2755da5220ddf988b6fd81b1a0fdc8537db9f69c033349fdcd62ca767f43a682dac405e6cdc10251cf764bcc116c4c01c77066c8c3aa143ce1523aad46406938969881ae74bf1a3b997121b176f3cdcdaa9b39492d53beaae548dda24ca1b68484f35ba03962c6ebb2a72ffba085d96e4985126387ad59725f1d3ca347350b2ec354702948ccbf6a93780b044a6da75632754f809c6d56b3dc7246490418057e44078fa88124c8c42911806322f293646df109df5871d829b50f10c0ced3b8d1a2d0f3ca93938fe032e5fc071fbc6928a0b76c52eaa36af8e1b4eab872456303e3e533dad39e74b69424a87e1fbdc602045a7fc2917cde8cedd943994ce294bb61a7562b899f114a8373fdc5a64acda40371b2dbb0257e3bb2b086352cf1ec4d3d1b9ee43cfc29c98c48aa5df9e5d6d3649094f11b1704d56e12a2d5d5dea53c779aa7b7574eb3103cfec8056f55b7fe9252ccae56ba1d5d69382f4512bf462fb6f538ef315da1590a09e8aebf928ef16ee470ff31e17fb9a68b0b7b6867bafc2b3ef6e6fa531c1b642d53fe97d883477e7b7a7f42b9de899dd545380dd1bf026a9767a891d6c92efb3845cbf7cceea8991c98f10a57462f07755b3ae542437f873c1fc15d34b40a5235e35035d6969f45c14cc0fdba80140f1d9f0b2e35f03205764f617a204fe5bd540bd77e29309a23e8157afe952211b3937f3b63d80036b40e4268ebd6faaf7dd566d404953f35cb4d97619188b6ed844aaf396c11281b748521c6a94cf66f09ec3a59d52b05cd4b88fa0bf16d9acbf946f21f8dcfbf3ff965ecdc174b7f04d38626374f32731376d2eb324410a0bf0f40ddb0e54524df547ca4fd7c5042d44aeaf9d032eb12c3d9ad914c127b4b6ecbd47067e2662559c564cb3ec044433f2fe2472cd7a469827c91f7ca910e9ffd6daedaaa3ef11129eff029ef2e6cf5680abf96cc2bcbaf69ada3d084fc4071be77c8ea827dbe41739bf4bcc253d142f8c63770fbc0bea08cf4a99f977ea6b703279ee93a9530f559f3c5fa858dbd15238c0a21d978d58c32a744f6dbdec0e41c57f39d1fef739774a1b380969fc7694b2343f6a22e074c7e27bded9adab3f0afae9ea635a7bd76e216bf082af52168e9d38051bee5c539d8d2d0e81c7a0435d813f4a4bc9f383ee9b28f63ddaa76242ee091b511dd43d1b38a79388e48f5d85cde271f7329d3ede4cadd0e74d1656b34330d1673fba2e9285107486512fa8bf584c12026d21f285fdf6891de483c34d7b766227a4dc93989ea5a55e655c519a141d2c82cfb8ce0d11d24494f09441eccfc35a449fff6ffb37cbcae80a94bba5ea03a04a97b71eb565ee69311d29da98bb850679a24fcafa0581cf3feb3d39af973d1a2d9637bbadbbbeb9089fa8ac21b308b8d7113288873d56e353d3f5c36a2f8d1422fbb27d7f6ca1eed98a297ffdf549dcf84dcde2c30913aa49afde5e670c08e7eebe46176d3aa477f3adf8ece52e591eedc0c3e5cbca3538ff5e575456807628b8ff4e5f74f4f1242524cb9e9f33c2fcc12d5cfd262d1d7fa5272cc97e7c26fcd28e9ed7a85c1ccd214554395563244fb24186919b922623eaffd8852ff8ed236729513ce6dbd82cde1a2195995d1bf2b0551d7ec73d8d974933bd3083e2ea985a04a0cf932ffd7267d21c4c9fd37781a075f7ea057b408569d6fba032e1dc9e6998f24c6442021aa2ad0ec1005499a0a47849e35c503f022a59d2e0c655038c859f04a566515235bb442f702baebcafe8a7dccfe276db3a631888a883fca1b35cc7224427863ff5d539a34c441628f9d7dfb5a8175aaaaa3d9e9244667984f203d331e41c8254e0d087c40eebcb8318a4f9a94fe6b7d39eefde18691f5e1dedc841d019840829de91db2faa8d172393bf4558118ae8445fe112320d631f6d93fbb967d448416627e9a19ec17cb2bc901fb20365ba233af57bcd855f343e4d87a92e18f4b30782a9d23d15672267fd0912c47defca13e959f47f5d7f17d9a766bba4d80c1af034cb71f196001f8dfd3cb62f41bb073bc28657f730a21a81446eb33eb3d537b34b27d37f2daee362b243de24c785d274b7896cd156cd1a4d669b0dc56bcee152d95ce7ae1d205b3db82a3161339c440bf7b09a1795ca8549da3e7fa075eae0b5bb702bf75a75774656e6525b361d7cf25128ff6af5483647b673918efd6b0e05c3dbc867782b00ec80fd94539e2cea9d5194cb0dc073a628e5b0aedbb4560ba471dc3d988a3a1d2716f5fefbc95756daeb7cb2869f9ad91a2b468f72c2d77e2cd61eea0b912f03adfb65e1c89b2add5becb0d6c70005cd849aaa4f66ca709f5e9b2da274b96a8e8e5d3b486d13e4bee83f82072a916be89890b5086023f1e3bb380f7ec01dfdb2d9d5699418a1fe3a376fd9f29eba147c468ad0cb5407ea182408e3cbab3186053ed0f6af3ad04e685dd63626ab055ca7d1861a6c3061ad60aaa196a38e67f02b363f17f02b44330c6fea238fa4dfa00246d5132fd130c6cc427e5f83b664359dfcca7bb3778a7b65203a244626988d5653e4c07f45a89b607e0df3d60e2cf59ccfe75aecda7259bb4d08ee349a483e800378059d99f8047e3cd20cd8fb7dec2162d8cd578baa97cde6dfd4f5c6400d36bfda72bc213ff0de96d0c1b655d2e3b102140225451bda3128d613bc7c50f7a9879fff3912adb7ad323cbc379bd5ebd0519c3ea4f8b5b02873fc8a0bbaded9c9ab7b267c188797ece8c6d05d37d51e820b2c50fa6072aed9281a1a21b0cd811c1f6dd122fbecea3fa05e597b906036c738d6a983ceb9c20d521984b1500a66c453c67a24c72f8355eb06a9733b1227c4a4da98dee91f2bc149049615010d7ec9d39dfabbc8375f23403a5b1425a4fe2d00828c43718c38018ec8d556b3597eb6e26a7eba674dc12eb1470da474d47cf00997c2e446ca7a0f18077ac52cdb4642036af42057a854ac95a9ef9c51baa47b392ea967d1353c1075ec6c246ec60335fca1586ecd758b4c88560acc4f3bb8548da52dcef23fbbe32fbecf2bab9d092a6876a59123b029dff4049e7b35a750e329853452d83f9755fec608c9f70e7b13b6014a1a594ec155994f3a2296f5fc01dfa07a21456fdd72d7657857fcd1af39ae51bcc3bd38f1daaf460426b3e0d12e18854e99be25c9452b5035207b962dbb61e326104d3e5920a880bcf96abb98f4228e0fe837abee6c946d0ed404a7fabf545ae3f902db02e6f958825632fec0589e3d31125dc7729792192dfacf3a2144b7d04ee04a5ba55c0a72948188395fbd87d919b88bb5b51f04e76eb9a9d07c4d762304f245f32a25b1aeab082c1c077d811a5b20658ab4c396b839937bf2bdea514c5e7a9897027e8fd46f2388a364ffff", 0x1000}, {&(0x7f0000001e40)="f848dbac87ad9d3064dc910c394d2472768ea03af12294dd58a13ad811c3627f047c6c77e8e33939c37428545c2e23cd4bdcbed3270b9f0347e430deec8459d5c4f01ca8356e450063a42bbbdc525d9b60364d7442981bce2adf82b14eb17601de976a19b0c3028176ab8958cd17bf614776d2fb82e888d0f667677f57a0871ec5fe66cd1d338c76d74484446f480a276fcf97d63365cb45a9232a06eca555446cb1b42b01147a3324b41be0c6705f2cff470713f5eb95be5a0601591b61541c9a0c68f7768f23e48beefeb28402fe", 0xcf}, {&(0x7f0000001f40)="0ba026ae5aa9ccd19520280e02ee", 0xe}], 0x9, &(0x7f0000002080)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x48810}, {&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002300)=[{&(0x7f00000021c0)="a05b3303a9b96e7e27af1d249392129176437bf83817c748b6950a5f704f3129e16c6f95ca09bebb53979d5c9d40a6e032e28c6f1a89447f9a264fc2f02ce0a5ddf8fda8400b6122c995c17db2f778095ca91243d52768d76d8c91624e48d19d29fbea8ad24f0e43f25c7e3dbb4e6998b293b7e9933cd8f26e3a1fc2944b4d90401868625eacaa9748b9e4fc839f83373d", 0x91}, {&(0x7f0000002280)="0d137895feec", 0x6}, {&(0x7f00000022c0)="e949946290f74aaaa3808a92ef9a5432e4d8cb", 0x13}], 0x3, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8, 0x40000}, {&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002700)="09ac00440d6cc2df4f62be4e0b0114695175c071bbb047c34875c1902e0f8a7e305969c74fd16d3005e48aa1dd8d742132f33ceff47df305021c1b68adda62a57b6a12454294cc21dcac22772f3b4a69ab868410dee1ab1cebe35fa1c083c0c2b8124debb79b068d10a6f3510af6a44e0b926bea8d98021f27af2ca7465ba48f76ca01adade4eb274bedbe09fba05b0396b63860a7e9807025", 0x99}, {&(0x7f00000027c0)}], 0x2, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38, 0x814}, {&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002900)="6a6a1b3393c34712b82a3ed7dcd30ad942c5aaaf7f03de3f12c2de", 0x1b}, {&(0x7f0000002940)="b46b7cc84ed56a6e59ffce365bd91787c18a938c0df2124b21abb82e6cd24b23ae4360ae0f3f509e6e780b3b57545163cbd228295571984bfefd47470d62642dabbabfab9e026c584d2209f860b5160148c5cc3300f67692dd853d64273e60012c4e7d40efe26bd1e99526aa1030d393590d2433d85a4044a810ba2ac0defda74f6e9ddb15ad1a2abcf7da1cfa37ae2783b87df4587c238bc9ff2bc0c06fb373d5d64dfbc9971418ae93149b853c68de71a69a059052371e90ded57680a82d6658d5167423b0c09aece21b2e34069e70a4b14aba328fad9833d41ebb3550c65496997576be81efeafd1967c974fd4a62b2f3c0f0f55e4b", 0xf7}, {&(0x7f0000002a40)="665e8d2d144afa7a94ca6c8e20101f103d0b", 0x12}], 0x3, &(0x7f0000002b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r3}}}], 0x78, 0x40040}, {&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002c00)="263bd7aa761ffa0c5639354ad4afaab92d657f374f58e077bb9112ae189b7898b3698a1df2601b98abc1cfbb685fdf692aa535cbdfa81c1da46746f30c47dd739b58bc4ce96d02", 0x47}, {&(0x7f0000002c80)="2d21c1bf2cf2538e0ac99293cc062147a8ebd7123ec97f0f7808a460539ce74722f124d7038bf3a1506fec5b6ce96a365c7251e0f063e9cffe6478ecda06085f043fad05705a3da6aa5087f56ed2dc62b75b08df96534eeeb5d8d9b37637f6b830b11f89890c70fb87d6e86492985cd2fb37dde9aa70d5338ca623b676a8724f252f2d01c7d5abc8aaf48b699f54db5e18e979bc93ff6dd7b15c86c974776a142452153255caa5a822efc5ea69f9a1b0e6a7f22d81d913e9279e1525c66fa26c", 0xc0}, {&(0x7f0000002d40)="bcf619806d0a4dc0617f68e8a06f8c8f099b8d51717a2f418d392c4a93267c563e336a5914983ba14f47cbe241cd05ec92d6713bbe3e0bc06ecbe7bdad855f47137c95e8db2c768990686144f8212acac236c5cdaac8df42d0042c07dd839681211f95607625e7114375334bdfb01e3e5bc9cc2b6c8c4f47109948de54661e697a5b9d9be05a87d9fd91f2e733980150b0f1ef64e2e3173c668b4bef4b47bc8e4fc9445163edbe0aa592af059447cd575527a7d3e19e6380", 0xb8}], 0x3, &(0x7f0000002ec0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r4, r1, r10]}}], 0x28, 0x8040}], 0x8, 0x40001)

[ 1598.708156][T11270] x_tables: duplicate underflow at hook 1
04:42:25 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xac00, 0x2fe000)

04:42:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x10, 0x2fe000)

04:42:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[ 1598.995595][T11293] x_tables: duplicate underflow at hook 1
04:42:25 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xad00, 0x2fe000)

[ 1599.107544][T11302] x_tables: duplicate underflow at hook 1
04:42:26 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xd, 0x2fe000)

[ 1606.953462][T11335] x_tables: duplicate underflow at hook 1
04:42:33 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xc, 0x2fe000)

04:42:33 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xd, 0x2fe000)

04:42:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xae00, 0x2fe000)

04:42:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:33 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x286b04)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:42:34 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = socket(0x2, 0x800, 0x1f)
r3 = socket(0x11, 0x800000003, 0x1)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={r4, @multicast1, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0xc)
close(0xffffffffffffffff)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @remote}], 0x4c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="7477d1112660c7edb6d0d8948812c23d8218138272baac680000000000000004f2b8a34d8dc05acd4375afd5b685f125cfda21bbeec231b1381e1e9b912b95585ce783976fcef1d195b32b56f937330cab2cff10a5042a0b9a6cccd9ba473fd79b89b02827dd577186f1aedb1f50c8220c40f8c9fbdf469cb8dd99eb9427a9b70bfadeb3d846dce762d193aa53e58914a676b2dd182040186335ce6ef3a47b470e", @ANYRES32=<r6=>0x0], &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
r7 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x10, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00', r9})

[ 1607.211756][T11342] x_tables: duplicate underflow at hook 1
[ 1607.224546][T11346] x_tables: duplicate underflow at hook 1
04:42:34 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xaf00, 0x2fe000)

04:42:34 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x9, 0x2fe000)

04:42:34 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:34 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb000, 0x2fe000)

[ 1607.622285][T11369] x_tables: duplicate underflow at hook 1
[ 1607.629326][T11378] x_tables: duplicate underflow at hook 1
04:42:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:40 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x440)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x4003000, 0xaf96, {}, {0x3, 0xc, 0x81, 0x7, 0x9, 0x7f, "4b6b4815"}, 0x1, 0x2, @planes=&(0x7f00000001c0)={0x5, 0x1, @userptr=0x2, 0x10000}, 0x7, 0x0, r2})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000000)=0x80000000)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000040)={{0x32, @rand_addr=0x3, 0x4e21, 0x0, 'ovf\x00', 0xb, 0x513, 0x21}, {@remote, 0x4e22, 0x10000, 0x9, 0xca, 0xfffff000}}, 0x44)

04:42:40 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0xb4, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xc0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, 0xff000000, 0xff000000, 'vxcan1\x00', 'team_slave_1\x00', {}, {0xff}, 0x6c, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x36aa, 0x2, 0x1, 0x0, "9041441dbb3a87f78a06b0556dc92d49cec7dd9d47ceb9f714ff5a3b27b016b88338dd72f39e0bee944868c0a80cf76004466e657e165dcf0c871f04309db20d"}}}, {{@ip={@loopback, @rand_addr=0x2, 0xffffff00, 0x0, 'veth0_to_bond\x00', 'team0\x00', {}, {0xff}, 0x6c, 0x3, 0x2}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x80, 0x40}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x821, 0x6da5e84979d679ef, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x7, 0x2, 0x6, 0x4, 0x4], 0x0, 0x4}, {0x1, [0x0, 0x6, 0x2, 0x5, 0x0, 0x2], 0x4, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000540)=0xffffff7f, 0x4)

04:42:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb900, 0x2fe000)

04:42:40 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0xb4, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xc0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, 0xff000000, 0xff000000, 'vxcan1\x00', 'team_slave_1\x00', {}, {0xff}, 0x6c, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x36aa, 0x2, 0x1, 0x0, "9041441dbb3a87f78a06b0556dc92d49cec7dd9d47ceb9f714ff5a3b27b016b88338dd72f39e0bee944868c0a80cf76004466e657e165dcf0c871f04309db20d"}}}, {{@ip={@loopback, @rand_addr=0x2, 0xffffff00, 0x0, 'veth0_to_bond\x00', 'team0\x00', {}, {0xff}, 0x6c, 0x3, 0x2}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x80, 0x40}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x821, 0x6da5e84979d679ef, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x7, 0x2, 0x6, 0x4, 0x4], 0x0, 0x4}, {0x1, [0x0, 0x6, 0x2, 0x5, 0x0, 0x2], 0x4, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000540)=0xffffff7f, 0x4)

[ 1613.591032][T11410] x_tables: duplicate underflow at hook 1
[ 1613.615496][T11405] x_tables: duplicate underflow at hook 1
04:42:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xe0ff, 0x2fe000)

04:42:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb900, 0x2fe000)

04:42:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x3, 0x2fe000)

04:42:40 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0xb4, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xc0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, 0xff000000, 0xff000000, 'vxcan1\x00', 'team_slave_1\x00', {}, {0xff}, 0x6c, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x36aa, 0x2, 0x1, 0x0, "9041441dbb3a87f78a06b0556dc92d49cec7dd9d47ceb9f714ff5a3b27b016b88338dd72f39e0bee944868c0a80cf76004466e657e165dcf0c871f04309db20d"}}}, {{@ip={@loopback, @rand_addr=0x2, 0xffffff00, 0x0, 'veth0_to_bond\x00', 'team0\x00', {}, {0xff}, 0x6c, 0x3, 0x2}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x80, 0x40}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x821, 0x6da5e84979d679ef, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x7, 0x2, 0x6, 0x4, 0x4], 0x0, 0x4}, {0x1, [0x0, 0x6, 0x2, 0x5, 0x0, 0x2], 0x4, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000540)=0xffffff7f, 0x4)

04:42:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x2fe000)

[ 1619.764836][T11772] x_tables: duplicate underflow at hook 1
04:42:46 executing program 2:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0)
mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)

04:42:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xff01, 0x2fe000)

04:42:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

04:42:46 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [0xffffffff], @string=0x0}})

04:42:46 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0xff, 0x0, 0x4, 0x1, 0x0, 0x1b, 0x67}, 0x8)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r6}, 0x8)
sendmsg$tipc(r4, &(0x7f0000001300)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="8439180c7d09da221fa7dbac10ab4e92ce98f69718b71b78a712638538c9d78ebf4a7f230e1988d6d0cd975d73c43d11fa91df576142d74ef5d0771624ce253a4f586210b1eb4cb5df4c2a0dc0e1705f7180335b59e01b047c47f512fe6fd3b1b751faea06e961dfe46d0423dd45207f1cf5652b4a1cf5bdee18b901c001307e32aa4d1aeb105496e258a95f51b943b6a1c12a8413284ac04363b5302603dae48e94375641e5e6d80f16c37a7f83ad9c0fcd49d28cf73338c4b43f2f26a0d213b05c7ae1c797e04ee9386935e87555ab8d90387a15149bf8ee5072819b6dde0715eec998", 0xe4}], 0x1, &(0x7f0000000300)="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", 0x1000, 0x40004}, 0x1)

04:42:46 executing program 0:
clone(0x210b2275fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[ 1620.007425][T11786] x_tables: duplicate underflow at hook 1
04:42:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:46 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ftruncate(r1, 0x40)
getsockopt$inet6_mreq(r0, 0x11, 0x67, 0x0, &(0x7f0000000700))

04:42:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xff0f, 0x2fe000)

04:42:46 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r0, 0x0, 0x209)

04:42:47 executing program 0:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00'], 0x0)
mprotect(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002)

[ 1620.330335][T12141] mmap: syz-executor.0 (12141) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
04:42:52 executing program 2:
unshare(0x40600)
timerfd_gettime(0xffffffffffffffff, 0x0)

04:42:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000280)='\x90\xc9B4\x8e\x99].\xfb\xc3\x1a\x82\xdd[\xf8\x16F;\\%\x86I\x8f\x1dmj\xad\xc6\xc7\xe6\x82:\v\x00\xe6\x9a=\xec%\xf3\x88\xf4E\x17\a\xef\xcaH\xf1\xf3\x8dokq\x96\x80\xe1\xfc\xf7\x81\xe6\xb3\xf29\xe6\xf4&\x83\xcc\x1e\x84\x1b\xa3, \\L\x15\xf5\xe8J\x9f\xb1}+\xf4\x1c\x85\xfeZX\x1f?_\xef\x87^t\xa3\xfab\xfa\xd9\x86\xbd\xa6\"\xbc\xfe3DX\xd0\xe5\x16\x85\xc5\xa2\x8c\xec\x86l\xf8\xf3\xe0<c\xed\x14\x1dX3\xfa\x88xe(\xc5\xaf\fx\x0f\x01\xd1-\xed\x06\xdct\x1a\xa1\xc1\xd5\xd15L\xf7\x9dUeF\x0e\x1d\xdd\xdd\xf5\xaf?\"I\x05\x1e5\xeei\x80\xb1wJ\x9b\x02w\x8c\xf7X\xf4', 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x628, 0x418, 0xd0, 0x328, 0xd0, 0x328, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f0000000100), {[{{@ipv6={@ipv4={[], [], @remote}, @remote, [0xd0d316c8d5a817fb, 0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0x1fe000000], 'batadv0\x00', 'batadv0\x00', {}, {0xff}, 0x89, 0x3f, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x24}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@mh={{0x28, 'mh\x00'}, {"8d56", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1f}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @mcast2, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'gre0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0xd9, 0x5, 0x2}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3f, 0x8001, @ipv6=@dev={0xfe, 0x80, [], 0x10}, 0x4e23}}}, {{@ipv6={@mcast1, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xc, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@mcast1, 0x21, 0x33}}}, {{@ipv6={@remote, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0xc}, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x3f, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x9b22, 0x4, 0x1, 0x0, "6fffdcb906c6f28427813e2408801691760744115d9cae9fe106230c279a8a647672209938661a0f4b5fce88eb56fa5aa71c8215bd1956cc16666887d98f6792"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={@local}, 0x14)
faccessat(0xffffffffffffffff, 0x0, 0x82, 0x1600)
preadv(r1, &(0x7f00000017c0), 0x315, 0x0)

04:42:52 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r1, r0, 0x0, 0x209)

04:42:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xffe0, 0x2fe000)

04:42:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)

04:42:52 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4000003, 0x2000)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:42:53 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r5}, 0x8)
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
ppoll(&(0x7f0000000180)=[{r3}], 0x1, &(0x7f0000000200)={r6, r7+30000000}, &(0x7f0000000240)={[0x4a0]}, 0x8)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r9}, 0x8)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000080))
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18)

04:42:53 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}, @restrict={0x0, 0x0, 0x0, 0x2, 0x7}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20)

04:42:53 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x8)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4)
ftruncate(r5, 0x80006)

04:42:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)

04:42:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x20000, 0x2fe000)

[ 1626.388984][T12602] BPF:[2] PTR (anon) 
[ 1626.404761][T12602] BPF:type_id=7
[ 1626.408281][T12602] BPF: 
[ 1626.418768][T12602] BPF:Invalid type_id
[ 1626.434368][T12608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1626.452948][T12602] BPF:
[ 1626.452948][T12602] 
04:42:53 executing program 5:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x7a000000}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000001c0)=""/262, 0x44, 0x106, 0x8}, 0x20)

[ 1626.600533][T12724] BPF:	 type_id=5 offset=2046820352 size=0
[ 1626.619649][T12724] BPF: 
[ 1626.624213][T12724] BPF:Invalid offset
[ 1626.638999][T12724] BPF:
[ 1626.638999][T12724] 
04:42:57 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x1276, 0x0)

04:42:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2b600, 0x2fe000)

04:42:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, &(0x7f0000000240)=""/258, 0x26, 0x102, 0x8}, 0x20)

04:42:57 executing program 3:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x6}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000001c0)=""/262, 0x44, 0x106, 0x8}, 0x20)

04:42:57 executing program 5:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20)

04:42:57 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r4, 0x301, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r7}, 0x8)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x601}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000180)=""/150, &(0x7f0000000040)=""/29, &(0x7f0000000240)=""/249, 0x3000})
r9 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

[ 1630.314088][T12741] BPF:[1] VAR (anon)
[ 1630.318035][T12741] BPF: 
[ 1630.332245][T12744] BPF:[1] RESTRICT (anon) 
[ 1630.333181][T12746] BPF:	 type_id=5 offset=0 size=6
[ 1630.353541][T12744] BPF:type_id=3
[ 1630.353809][T12741] BPF:meta_left:0 meta_needed:4
[ 1630.358495][T12744] BPF: 
[ 1630.367480][T12746] BPF: 
[ 1630.370793][T12746] BPF:Invalid size
[ 1630.374661][T12741] BPF:
[ 1630.374661][T12741] 
[ 1630.380040][T12746] BPF:
[ 1630.380040][T12746] 
[ 1630.385209][T12744] BPF:Invalid type_id
[ 1630.394966][T12744] BPF:
[ 1630.394966][T12744] 
04:42:57 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca)
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000000cb)

04:42:57 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/sem\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

04:42:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2b7ff, 0x2fe000)

04:42:57 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000))

04:42:57 executing program 5:
mmap(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

04:42:57 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

04:43:03 executing program 2:

04:43:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0)

04:43:03 executing program 5:

04:43:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d032, 0x2fe000)

04:43:03 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

04:43:03 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @ptr=0x6}})

04:43:03 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x2000}, 0x4)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)

04:43:03 executing program 3:

04:43:03 executing program 5:

04:43:03 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
read(r1, &(0x7f0000000000)=""/104, 0x68)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:43:03 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

04:43:03 executing program 3:

04:43:09 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a72ff58ab16f88b9663da5668b145e6313c17b22b9e79c9258687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfcb79eda41d0d8d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9f11b0000ff7f0000"], 0x10}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0xfa, 0x0)

04:43:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d033, 0x2fe000)

04:43:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001200050d00"/20, @ANYRES32, @ANYBLOB="8f0000000000000014001280040001007663616e00000000040100802101832592f33ca0b07bffed0f34a5d53fa2a93ff62b3b4954dd150c859b19e9ce1a34aca96b232eca4fc7a5e6400c9d699fd56e6fb9148932cc8f06050000001303a94776d5f51937f8644514a1785ed30f46416d5f9c322ce15e17d56f8caa0a167f7a3fe06c2a5ac60f2d37571e1d308c003a07651eb9828803194893a63d961be4c8eeeb2f48d84891a2f7563273d257a645c9cb2bd5a208ef"], 0x34}}, 0x0)

04:43:09 executing program 3:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="8e", 0x1}], 0x2, 0x0)

04:43:09 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)

04:43:09 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x20000)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:43:09 executing program 5:
pipe(&(0x7f0000000300))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r5, r4, 0x0, 0xa198)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="2e6dd54e64ebb802dbdcd4a8b49ea0d1b98db62393899476fc8b8ac5ee6fc01e180e2715e02dac664f353ba48f8fb4cdb94169c642520ee04b90a3f84a31931c10036492c94bdab1281213c094841d8fe1391131e640c331cfe95919e894"], 0x72)
sendfile(r3, r2, 0x0, 0xa198)

04:43:09 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'batadv0\x00', <r2=>0x0})
sendmmsg$inet(r1, &(0x7f00000019c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="58f6759af618ce578d7a422804bb31301ee0f4db68125636e343d4e7db4513b556b8081fb52144e46e0fdc0439395de7948cc5465a96f02c0e4dbba8e27de276dbd5d7a239ea2612390e2b19e7e9bfbe77cf2c487628943b5d36dc9128a91ce4e42433e0ac0bbaca6491e6a77165918c0ae99b0c87cedc702995bac544028219b882b5a0addc1dc76ce99e5dd238ada34fe13ca965d4f0043159621172f8c1c5d57ddeca478b611ed73c8243dffc864ea29d4786c35889a3ea201a651c77e90ae2a1059001d218c446", 0xc9}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="e1d2a7614542d781c5447baee3c735ab36a46f93876265c3729daf4f841012f74c2031ba245d4b8d5cd5d1a2ffd224f6b4a71445d8c28c7bb5d15eb70dc62d163c0370e4772e419f9e07c3c3302f10b231c1dd220d5fdad19468cbf7c4da7fb589", 0x61}], 0x3, &(0x7f00000012c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x3c, 0x3, 0x4, [{@local, 0x40}, {@broadcast, 0x1}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "efde17bd2095d030f2ffd73a"}]}, @noop, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x73, 0x0, 0x3, [0x9, 0x100, 0x6]}, @noop, @timestamp_prespec={0x44, 0x34, 0xa3, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast1}, {@broadcast, 0x4}, {@local, 0x5}, {@remote, 0x2}, {@local, 0x10001}]}, @cipso={0x86, 0x1a, 0x3, [{0x0, 0x11, "7755b6d8fd770ca2174cb76fecc301"}, {0x2, 0x3, 'n'}]}]}}}], 0xe0}}, {{&(0x7f00000013c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001400)="65f521a8ca0cac3a8dfbe1a4d52fdeba002221119160bd915f7ae2a8ca446ff4a3c7e92449b714bbb79412ef76ceacccb3fc111841292f3dd443c55fae4f1409d5def8c7488847a7cbab78a99456ce24d12b37e8b10ca3f4e180c76cb35137140d16a29b1085f6ec73afb58eab3ace17239f10d70b5e7e9913fbc72b482e6c1d43702dc9945af3020ab285e2e9e4e399008408b2a56716e937e995d835ed1b4510a055cd19afbe2646c2162d0ff681500917f767d1261cef35af564de21e16a9346b2a0ba7a3788e07f3d972fc408909604e4bc34725", 0xd6}, {&(0x7f0000001500)="b00424d83d721538b1605b1a97ab53b3ca7f9b3b63f842ee91962207713a4bb2e3cf471234407ad7293f451c5193d9f994a52df9bd3ee2598aaa4d820fe780e9f1f3ade51c50e08eff6ee79c50e19bac6a242771", 0x54}], 0x2}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @rand_addr=0x4}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001600)="83747d049ccdec23c7d572a59b343b90025613d6e51c786daa4bce8a0a76391704fa752dc27553998d8e99c98d3a84f28ed0ddaf24fdb037e0e59f5d6c90f445ac6fb1dcf2e7", 0x46}, {&(0x7f0000001680)="a2aafeb72eab6392f3cb41df324d1d037683d31eab0a000fb082312846e5ca9188789307f23192471ec6d64a75a9ddff050c27b4a1e5d948ea67a960dc15aeafe3c28be95afbaee53f24191de026ec3b14d6a11144291681834d26264822b063251e592a68a982d9fa7a86b718af7bd7bb781f0daa2b4e9f9e47a075fa8cb78e2b79061cf32d9de86a02fccde18ab70f32c6f39cee5fd69d50b1cba5eecca51310da2db46b70499ce53c5329de13b80c3c73289b12059c83d0e620e3a66255", 0xbf}, {&(0x7f0000001740)="791131c4bff2ee8552201deb5253480d617c012a5c38cd62c01073185a127f7aac440b985b28955a32be21f0354158d208bd31026d17d787f16bdc92c32756b34b2a1f8c055eed99", 0x48}], 0x3, &(0x7f0000001900)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xac, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x89, 0xa, "da3ed740f5b05348"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x88}}], 0x3, 0x40)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980913, 0x0, [], @string=0x0}})
prctl$PR_SET_SECUREBITS(0x1c, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)

04:43:09 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x1)
sendfile(r3, r2, 0x0, 0xa198)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYBLOB="2e6dd54e64ebb802dbdcd4a8b49ea0d1b98db62393899476fc8b8ac5ee6fc01e180e2715e02dac664f353ba48f8fb4cdb94169c642520ee04b90a3f84a31931c10036492c94bdab1281213c094841d8fe1391131e640c3"], 0x69)
sendfile(r1, r0, 0x0, 0xa198)

[ 1643.187597][   T27] audit: type=1804 audit(1585284189.963:47): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir913195499/syzkaller.KAzGUn/417/file0" dev="sda1" ino=16626 res=1
04:43:10 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
lseek(r0, 0x0, 0x0)

04:43:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d034, 0x2fe000)

[ 1643.258257][   T27] audit: type=1804 audit(1585284190.003:48): pid=13654 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir913195499/syzkaller.KAzGUn/417/file0" dev="sda1" ino=16626 res=1
[ 1643.314067][   T27] audit: type=1804 audit(1585284190.093:49): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir765391368/syzkaller.ANkv9H/485/file0" dev="sda1" ino=16627 res=1
04:43:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa910000108100000008004b0e00a30066000000219078e0000002ac1e0101830be3426a06801c87b437576a6035c4d911440cb9000000006800000000004e204e240481f4584760bf458dd0346b8e4488771c868afc593ae26415322e81e8cd38b2d8a38eb98468368f925c758b43f9d2bbd46002b544da72228a306272ce2b25430d4a162527757b08b44b79f895cc2fc83aebc35b15083677f8a40b830000ffb623acb29a78116578c11d7a2a15377b574dc0f47359acb6230e"], 0xb9)

[ 1643.350766][   T27] audit: type=1804 audit(1585284190.133:50): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir765391368/syzkaller.ANkv9H/485/file0" dev="sda1" ino=16627 res=1
04:43:16 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/protocols\x00')
sendfile(r0, r1, 0x0, 0x1)

04:43:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

04:43:16 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4b8, 0x1e8, 0x2d0, 0x0, 0x2d0, 0x3d0, 0x3d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ipmi_device_t:s0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x508)

04:43:16 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d035, 0x2fe000)

04:43:16 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00')
sendfile(r0, r1, 0x0, 0x1)

04:43:16 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081ffffff0100008000000000000000000002000000000000640c000000000000090000000000000000000000000000000000000000000000000000000000000000000020e90300007f0000000000000000000000000000000700000000000000ffff00000000000000007800"/192])
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xffff8001, 0x0, 0x2020, 0x7, 0x4, 0x0, 0x0, 0x1}})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @ptr=0xd1}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
accept$inet(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x30}, 0x814}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080))

04:43:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0xc205})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x21, 0x10d, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet(0x2, 0x3, 0x5)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x80010000000002)

04:43:17 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000))

04:43:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/93, 0x5d}], 0x1, 0x8b)

04:43:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d036, 0x2fe000)

04:43:17 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000010000"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120100020000000a000097d3d34473"], 0x10}}, 0x0)
recvmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x10000, 0x0)

04:43:17 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120)
dup2(r0, r1)

04:43:17 executing program 4:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8)
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
dup(r1)

[ 1650.574814][ T7789] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[ 1650.604278][ T7789] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1650.633801][ T7789] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1650.718532][ T7789] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
04:43:24 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000007c0), 0x8)

04:43:24 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000010000"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120100020000000a000097d3d34473"], 0x10}}, 0x0)
recvmmsg(r4, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/124, 0x7c}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)

04:43:24 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
dup2(r0, r2)

04:43:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d037, 0x2fe000)

04:43:24 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40106308}], 0x0, 0x0, 0x0})

04:43:24 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000))
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:43:24 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000001380)='net/snmp\x00')
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0)

04:43:24 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0)

04:43:24 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

04:43:24 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

04:43:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
accept$inet(r0, 0x0, 0x0)

04:43:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d038, 0x2fe000)

04:43:32 executing program 2:

04:43:32 executing program 0:

04:43:32 executing program 3:

04:43:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d039, 0x2fe000)

04:43:32 executing program 5:

04:43:32 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)

04:43:32 executing program 3:

04:43:32 executing program 5:

04:43:32 executing program 0:

04:43:32 executing program 4:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x20})
r3 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:43:32 executing program 3:

04:43:32 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d03a, 0x2fe000)

04:43:38 executing program 2:

04:43:38 executing program 0:

04:43:38 executing program 5:

04:43:38 executing program 3:

04:43:38 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d03b, 0x2fe000)

04:43:38 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r4}, 0x8)
ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0xffff)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000580)=0xc)
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r6}}]})
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000580)=0xc)
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@gid={'gid', 0x3d, r8}}]})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8434b82b1e4d87, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache='fscache'}, {@noextend='noextend'}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@access_user='access=user'}, {@noextend='noextend'}, {@loose='loose'}, {@uname={'uname', 0x3d, '/dev/video#\x00'}}, {@access_client='access=client'}, {@dfltgid={'dfltgid', 0x3d, r8}}]}})

04:43:38 executing program 0:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

04:43:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

04:43:38 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
ioctl$TUNATTACHFILTER(r0, 0x400454d4, &(0x7f0000000200)={0x0, 0x0})

04:43:39 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d03c, 0x2fe000)

04:43:39 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x104082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x5481, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
flock(0xffffffffffffffff, 0x2)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b5, 0x0)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
creat(0x0, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/17, 0x11)
flock(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
socket(0x2c, 0x0, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
sendfile(r0, r0, 0x0, 0x40fdf)

04:43:39 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

04:43:43 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10020, 0x0)

04:43:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d03d, 0x2fe000)

04:43:43 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000272000))

04:43:43 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, {0x0}, 0x0}, 0xa0)

04:43:43 executing program 0:
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

04:43:43 executing program 4:
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x2, 0x8, 0x4, 0x40000000, 0xda97, {}, {0x1, 0xc, 0x5, 0x8, 0xff, 0x4, "c45452f6"}, 0x1000000, 0x2, @userptr=0x7, 0x7, 0x0, r3})
r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x9e0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:43:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}})
write$tun(r0, &(0x7f0000000680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x10, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra}}}}, 0x42)

04:43:43 executing program 5:
gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/198)
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
fsopen(0x0, 0x0)

04:43:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d03e, 0x2fe000)

04:43:43 executing program 5:
gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/198)
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
fsopen(0x0, 0x0)

04:43:43 executing program 0:
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)

04:43:43 executing program 5:
gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/198)
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
fsopen(0x0, 0x0)

04:43:49 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}})

04:43:49 executing program 0:
unshare(0x22020400)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000200))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:43:49 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d03f, 0x2fe000)

04:43:49 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x104082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x5481, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
flock(0xffffffffffffffff, 0x2)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b5, 0x0)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
creat(0x0, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/17, 0x11)
flock(0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

04:43:49 executing program 5:
gettid()
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/198)
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
fsopen(0x0, 0x0)

04:43:49 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={r3}, 0x8)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000180)={"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"})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980913, 0x0, [], @string=0x0}})

04:43:49 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2, 0x0)

04:43:49 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x15, 0x0, &(0x7f0000000280))

04:43:49 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x104082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x5481, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
flock(0xffffffffffffffff, 0x2)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b5, 0x0)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
creat(0x0, 0x0)
flistxattr(r3, &(0x7f00000000c0)=""/17, 0x11)
flock(0xffffffffffffffff, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

04:43:49 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x2, 0x0)

04:43:49 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d040, 0x2fe000)

04:43:49 executing program 5:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x10001, 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x0)

04:43:58 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x3800)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
getpid()
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

04:43:58 executing program 0:
r0 = io_uring_setup(0x69, &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/230, 0xe6}, {0x0}], 0x2)

04:43:58 executing program 3:
clone(0x108b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1)

04:43:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d041, 0x2fe000)

04:43:58 executing program 5:
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/64, 0x40}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4}, 0x9d7}, {{&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/102, 0x66}], 0x2}, 0xffffffff}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000000b80)}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001100)=""/186, 0xba}], 0x4, &(0x7f0000001200)=""/155, 0x9b}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)=""/52, 0x34}, {&(0x7f0000002500)=""/74, 0x4a}, {&(0x7f0000002600)=""/229, 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{0x0}, {&(0x7f00000028c0)=""/210, 0xd2}], 0x2}, 0x32d}, {{&(0x7f0000002e80)=@hci, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f00)=""/198, 0xc6}], 0x1, &(0x7f0000000300)=""/21, 0x15}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/9, 0x9}, 0x6}], 0x8, 0x100, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

04:43:58 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

[ 1692.049194][T16015] ipt_CLUSTERIP: no such interface gredap0
04:43:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r0 = memfd_create(&(0x7f0000000080)='\xaa\xa7f\x98\xb4\xee\xb9!u\x7f]\x04\at\xaa\xbb\xe9\xde\xa3k\xf3\x10Hq1\xcf\x8f\xd3&\xe7\xb4s \xde\xa6\xc2\xbel4\xdc\x93\xce`dd\x8d\xaaQA\x01$\xcbF\xea\x98?:\xcf}ULn\xdc\xce\xbaD\x17\xfd0R\xbc\xfb\xec\x16\xbe\xca\xe5\x8e\xfb\x85\xcbg\xf5\x00\xbb\xce\x17~\xed1\xebi\xc2\x04\xbcc\x95\xf7$%\xc4HZ\xfc\x970\xf5l\"\x92\x82\xd2\xb9\xaa\xd5\xea\x9c\f\x9bZ\xb4\x04G\x97\x99\xb9\xe8\xcd\xfb\xbfw\xc3^\xb1\xeec\t\xf6\x1cH\xbc,\x84O\xc8\xd6\xa2.\xf49q\xe3', 0x0)
write(r0, &(0x7f0000002000), 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0xfec)

04:43:58 executing program 5:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semop(0x0, &(0x7f0000000000)=[{}, {0x0, 0xffffffff}], 0x2)

04:43:59 executing program 4:

04:43:59 executing program 0:

04:43:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d042, 0x2fe000)

04:43:59 executing program 4:

04:44:05 executing program 4:

04:44:05 executing program 2:

04:44:05 executing program 3:

04:44:05 executing program 0:

04:44:05 executing program 5:

04:44:05 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d043, 0x2fe000)

04:44:06 executing program 4:

04:44:06 executing program 5:

04:44:06 executing program 0:

04:44:06 executing program 3:

04:44:06 executing program 5:
writev(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0xffffffffffffff8a, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000380)=@ipx, 0x80, &(0x7f0000000840)=[{&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000680)=""/34, 0x22}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000800)=""/20, 0x14}], 0x7, &(0x7f00000008c0)=""/81, 0x51}, 0x5}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000009c0)=""/45, 0x2d}], 0x1, &(0x7f0000000a40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001a40)=@generic, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/6, 0x6}, {&(0x7f0000001b00)=""/13, 0xd}], 0x2, &(0x7f0000001b80)=""/155, 0x9b}, 0x9}, {{&(0x7f0000001c40)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001cc0)=""/156, 0x9c}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/100, 0x64}, {&(0x7f0000002e00)=""/125, 0x7d}, {&(0x7f0000002e80)=""/169, 0xa9}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/181, 0xb5}, {&(0x7f0000003040)=""/146, 0x92}, {&(0x7f0000003100)=""/177, 0xb1}, {&(0x7f00000031c0)=""/252, 0xfc}], 0xa}, 0x100}, {{&(0x7f0000003380)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003400)=""/29, 0x1d}], 0x1, &(0x7f0000003480)=""/81, 0x51}, 0x4a7}, {{&(0x7f0000003500)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003580)=""/61, 0x3d}], 0x1, &(0x7f0000003600)=""/194, 0xc2}, 0x4}, {{&(0x7f0000003700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003780)=""/2, 0x2}, {&(0x7f00000037c0)=""/172, 0xac}, {&(0x7f0000003880)=""/209, 0xd1}, {&(0x7f0000003980)=""/201, 0xc9}], 0x4, &(0x7f0000003ac0)=""/213, 0xd5}}, {{&(0x7f0000003bc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003c40)=""/165, 0xa5}, {&(0x7f0000003d00)=""/130, 0x82}, {&(0x7f0000003dc0)=""/165, 0xa5}, {&(0x7f0000003e80)=""/200, 0xc8}], 0x4}, 0x40}, {{&(0x7f0000003fc0)=@x25, 0x80, &(0x7f0000004140)=[{&(0x7f0000004040)=""/189, 0xbd}, {&(0x7f0000004100)=""/40, 0x28}], 0x2, &(0x7f0000004180)=""/140, 0x8c}, 0x400}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004240)=""/100, 0x64}, {&(0x7f00000042c0)=""/181, 0xb5}], 0x2, &(0x7f00000043c0)=""/221, 0xdd}, 0x7fff}], 0xa, 0x10063, &(0x7f0000004740)={0x0, 0x989680})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0)
r3 = dup(r2)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x1, 0x344, 0x0, 0x0, [0xfffffffe]})
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000080)=0x18a7)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x18, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000004780)=@sack_info={<r6=>r5, 0x391, 0x5}, &(0x7f00000047c0)=0xc)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000004800)={r6, 0xff, 0x6, 0x7}, 0x10)

04:44:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x142, 0x0)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x9, 0x0, 0x0})
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0)

04:44:06 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:10 executing program 2:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='check=r'])

04:44:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x10000, 0x0, 0x9})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

04:44:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d044, 0x2fe000)

04:44:10 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:10 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x142, 0x0)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x3, 0x1, 0x0, 0x9, 0x0, 0x0})
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0)

04:44:10 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:10 executing program 0:

04:44:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d045, 0x2fe000)

04:44:10 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:10 executing program 3:

04:44:10 executing program 0:

04:44:16 executing program 2:

04:44:16 executing program 3:

04:44:16 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d046, 0x2fe000)

04:44:16 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)

04:44:16 executing program 0:

04:44:16 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:16 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x8000)
close(r0)

04:44:16 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
open(0x0, 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x810, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:16 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d047, 0x2fe000)

04:44:16 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1710.306331][T16954] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1710.378948][T16954] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1710.428748][T16954] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1710.468918][T16954] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:44:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d048, 0x2fe000)

[ 1710.479029][T17062] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1710.508737][T17062] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:44:17 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

[ 1710.541909][T17062] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1710.607863][T17062] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1710.617879][T17062] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1710.652649][T17062] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:44:20 executing program 2:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:44:20 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
open(0x0, 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x810, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:20 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d049, 0x2fe000)

04:44:20 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)

04:44:20 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:21 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
open(0x0, 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x810, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d04a, 0x2fe000)

[ 1714.465230][T17290] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1714.479476][T17290] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1714.511079][T17290] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1714.544676][T17290] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1714.553647][T17290] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1714.574372][T17290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:44:21 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d04b, 0x2fe000)

04:44:21 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

[ 1714.818730][T17417] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1714.868761][T17417] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1714.882232][T17417] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1714.904836][T17417] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:44:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d04c, 0x2fe000)

04:44:25 executing program 2:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:44:25 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:25 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:44:25 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d04d, 0x2fe000)

04:44:25 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)

04:44:25 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:25 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d04e, 0x2fe000)

04:44:25 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:25 executing program 0:
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30}, 0x30)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x8, 0x1, 0x6c0, 0x3}]})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={<r4=>0x0}, &(0x7f0000000200)=0xc)
rt_tgsigqueueinfo(0x0, r4, 0xe, &(0x7f0000000380)={0x0, 0x2, 0x6})

04:44:25 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d04f, 0x2fe000)

04:44:26 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e00000034000908d22780258c6394fb0124fc0e10000b500c000200053582c1b7153e370900018025642500d1bd", 0x2e}], 0x1}, 0x0)

[ 1719.503382][T18001] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1719.513619][T18001] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1719.523887][T18001] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1719.545504][T18001] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1719.552111][T18001] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1719.563575][T18001] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:44:34 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x20000)

04:44:34 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:34 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d050, 0x2fe000)

04:44:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000001a008102e00f80ecdb4cb90080000004a1dc314f91bb454ba17b98f7fe556a6c98bfca64000400810040", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0)

04:44:34 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
dup3(r1, r0, 0x0)

04:44:34 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1800000034000908d22780258c6394fb0124fc0e10000b50", 0x18}], 0x1}, 0x0)

04:44:34 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
dup3(r1, r0, 0x0)

04:44:34 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d051, 0x2fe000)

[ 1727.684199][T18125] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1727.702305][T18125] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:44:34 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x9, 0x0, 0xfc, 0x0, 0x100000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7, 0x0, 0x3, 0x4000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(r2, 0x10e, 0x2, 0x0, 0x0)
close(r2)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffffffff8000)
r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x80, 0x3, 0x0, 0x73, 0x0, 0xffffffff, 0x50445, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x9020, 0x200, 0x8, 0x1, 0x3, 0x5, 0x3}, 0xffffffffffffffff, 0xa, r0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0xff, 0xfffffffb}, 0xc)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, r4, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
socket$kcm(0x29, 0x2, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2')

[ 1727.739809][T18125] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1727.774817][T18125] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1727.815974][T18125] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1727.827326][T18125] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:44:34 executing program 0:
perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0xc820, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x7, 0x6, 0x9, 0x0, 0xb3}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffeae, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200085})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

04:44:34 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
dup3(r1, r0, 0x0)

04:44:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x20000)

04:44:45 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:45 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d052, 0x2fe000)

04:44:45 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:46 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:46 executing program 0:
perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0xc820, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x7, 0x6, 0x9, 0x0, 0xb3}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffeae, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200085})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

04:44:46 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:46 executing program 0:
perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0xc820, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x7, 0x6, 0x9, 0x0, 0xb3}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffeae, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200085})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[ 1739.482946][T18484] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1739.521084][T18484] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1739.571392][T18484] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:44:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d053, 0x2fe000)

04:44:46 executing program 0:
perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0xc820, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x7, 0x6, 0x9, 0x0, 0xb3}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffeae, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200085})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')

[ 1739.615470][T18484] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1739.623691][T18484] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
04:44:46 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1739.668065][T18484] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:44:46 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x20000)

04:44:52 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:44:52 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:52 executing program 0:

04:44:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d054, 0x2fe000)

04:44:52 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:44:52 executing program 0:

04:44:52 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:44:52 executing program 0:

04:44:52 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d055, 0x2fe000)

04:44:52 executing program 0:

04:44:52 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1746.085923][T18531] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1746.132456][T18531] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1746.200797][T18531] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1746.235762][T18531] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1746.242924][T18531] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1746.262320][T18531] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x20000)

04:45:01 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

04:45:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d056, 0x2fe000)

04:45:01 executing program 0:

04:45:01 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:01 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:01 executing program 0:

04:45:02 executing program 0:
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)

04:45:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x2d057, 0x2fe000)

[ 1755.469162][T18571] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1755.479678][T18571] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1755.490404][T18571] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:02 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
creat(0x0, 0x120)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x841)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001ba62a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x40ed)

[ 1755.517798][T18571] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1755.528296][T18571] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1755.548455][T18571] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:02 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x32000, 0x2fe000)

[ 1755.988919][T18806] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1756.014209][T18806] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1756.026193][T18806] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1756.053458][T18806] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1756.060121][T18806] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1756.071911][T18806] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:09 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x63300, 0x2fe000)

04:45:09 executing program 0:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth0_to_team\x00', 0xffffffc4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r3 = socket(0x840000000002, 0x3, 0x0)
sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000040), 0x10, 0x0}}, {{&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}}], 0x2, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r2})

04:45:09 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

04:45:09 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:09 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getpid()
tkill(0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x104)
socket$inet_udp(0x2, 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

04:45:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x100000, 0x2fe000)

[ 1762.717635][T18833] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1762.732182][T18833] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1762.753916][T18833] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:09 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114006c00000000000000000000000000000000006c835ac2f428f8c3895ccb98be2f862d6f324766f393b7c23faa44d637a524e52f1374d253685065ae9eab1d364835d2bbca0d0105903747658c17277ec4099e10be8dcb71af219fc4f98612b269c33cc0d9c305a5a5fb5f42ae5ff83d99889ac675685e67aa12bfb76ee978f532e9dfb055b2d0d068446462d639839a94fa0354c7db2c96376df6dfea5db76a3b0c2eb04ce3a6ef2aec5a691cd0e0c61047c49052385d31a3cdb5ddea8d3f3f789299e2a142650ee163b6384fb0fc"], 0x40}}, 0x0)

[ 1762.802162][T18833] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1762.808603][T18833] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1762.834522][T18833] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x102400, 0x2fe000)

04:45:09 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:09 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

[ 1763.366986][T19170] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1763.379959][T19170] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1763.390093][T19170] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1763.401310][T19170] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1763.407660][T19170] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1763.419371][T19170] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x102500, 0x2fe000)

04:45:17 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:17 executing program 0:
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

04:45:17 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

04:45:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:17 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:17 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000040c0), 0x14ec)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x0, 0x911040}}, 0x50)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff4b67}}}, 0x78)

04:45:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x200300, 0x2fe000)

[ 1771.187978][T19291] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1771.198111][T19291] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1771.210520][T19291] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:18 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114006c00000000000000000000000000000000006c835ac2f428f8c3895ccb98be2f862d6f324766f393b7c23faa44d637a524e52f1374d253685065ae9eab1d364835d2bbca0d0105903747658c17277ec4099e10be8dcb71af219fc4f98612b269c33cc0d9c305a5a5fb5f42ae5ff83d99889ac675685e67aa12bfb76ee978f532e9dfb055b2d0d068446462d639839a94fa0354c7db2c96376df6dfea5db76a3b0c2eb04ce3a6ef2aec5a691cd0e0c61047c49052385d31a3cdb5ddea8d3f3f789299e2a142650ee163b6384fb0fc"], 0x40}}, 0x0)

[ 1771.238620][T19291] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1771.245745][T19291] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1771.262038][T19291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:18 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:18 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114006c00000000000000000000000000000000006c835ac2f428f8c3895ccb98be2f862d6f324766f393b7c23faa44d637a524e52f1374d253685065ae9eab1d364835d2bbca0d0105903747658c17277ec4099e10be8dcb71af219fc4f98612b269c33cc0d9c305a5a5fb5f42ae5ff83d99889ac675685e67aa12bfb76ee978f532e9dfb055b2d0d068446462d639839a94fa0354c7db2c96376df6dfea5db76a3b0c2eb04ce3a6ef2aec5a691cd0e0c61047c49052385d31a3cdb5ddea8d3f3f789299e2a142650ee163b6384fb0fc"], 0x40}}, 0x0)

04:45:18 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:18 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00')
preadv(r0, &(0x7f00000017c0), 0x243, 0x0)

04:45:18 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x202300, 0x2fe000)

[ 1771.678338][T19515] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1771.722060][T19515] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1771.735335][T19515] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:18 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1771.773881][T19515] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1771.780556][T19515] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1771.792340][T19515] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:18 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1772.111417][T19644] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1772.128797][T19644] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1772.139690][T19644] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1772.163065][T19644] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1772.169817][T19644] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1772.189164][T19644] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:24 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:24 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
getpid()
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10001)

04:45:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x202400, 0x2fe000)

04:45:24 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:24 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:24 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:24 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:24 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munlockall()

04:45:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x202500, 0x2fe000)

[ 1777.657662][T19663] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1777.668694][T19663] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:45:24 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r0 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

[ 1777.714392][T19663] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:24 executing program 0:

04:45:24 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r0 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

[ 1777.813464][T19663] EXT4-fs error (device loop3): ext4_fill_super:4532: inode #2: comm syz-executor.3: iget: root inode unallocated
[ 1777.877048][T19663] EXT4-fs (loop3): get root inode failed
[ 1777.897583][T19663] EXT4-fs (loop3): mount failed
04:45:30 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r0 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

04:45:30 executing program 0:

04:45:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x232000, 0x2fe000)

04:45:30 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:30 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:30 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:30 executing program 0:

04:45:30 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x233000, 0x2fe000)

04:45:30 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:30 executing program 0:

[ 1784.159834][T19807] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:45:31 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x234000, 0x2fe000)

[ 1784.249325][T19807] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:45:31 executing program 0:

[ 1784.327723][T19807] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:31 executing program 0:

04:45:31 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

[ 1784.420380][T19807] EXT4-fs error (device loop3): ext4_fill_super:4532: inode #2: comm syz-executor.3: iget: root inode unallocated
[ 1784.495070][T19807] EXT4-fs (loop3): get root inode failed
[ 1784.522860][T19807] EXT4-fs (loop3): mount failed
04:45:37 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:37 executing program 0:

04:45:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x235000, 0x2fe000)

04:45:37 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:37 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:37 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:37 executing program 0:
unshare(0x2a000400)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)='0', 0x1}], 0x1)

04:45:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

[ 1790.636437][T19854] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1790.648126][T19854] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1790.660575][T19854] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:37 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x236000, 0x2fe000)

[ 1790.681463][T19854] EXT4-fs error (device loop3): ext4_fill_super:4532: inode #2: comm syz-executor.3: iget: root inode unallocated
[ 1790.703956][T19854] EXT4-fs (loop3): get root inode failed
[ 1790.710744][T19854] EXT4-fs (loop3): mount failed
04:45:37 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:43 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:43 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:43 executing program 0:
unshare(0x2a000400)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)='0', 0x1}], 0x1)

04:45:43 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:43 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x237000, 0x2fe000)

04:45:43 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:43 executing program 0:
munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000)
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0)
shmdt(0x0)

04:45:43 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x238000, 0x2fe000)

[ 1797.177596][T19994] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:45:44 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1797.223859][T19994] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1797.234115][T19994] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1797.256910][T19994] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:44 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:50 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00')
lseek(r0, 0xb31, 0x0)

04:45:50 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:50 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x239000, 0x2fe000)

04:45:50 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:50 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="c9ddcab8ec28dcacd651311e022196b0553d4c8cfc9ed15ddf8901005fa077c94f568000000000003a918faff6917dc62a790df1c3b934f1275e5d1445295b1b2b61598068b935b0f6640bcfbd0624fd44132f6832485b7529e212e4f7c87b9d4cae687a52ecb82ea0dbb0b67a9e044300002d2c2d1f8b54dc28e2544e00a904b682f5cecd1e2e091ff3353224240d268f85da7eaaad3590c4"], 0xa)
close(r2)
socket(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000680600"], 0x1}}, 0x0)
writev(r0, &(0x7f0000000600), 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x100, 0x10, 0x615, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2270d}, [@IFLA_LINKINFO={0xcc, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xbc, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9000000, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x17a4}}]}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe24, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xed, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x17f1b8a6, 0x4531}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x100}}, 0x0)

04:45:50 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23a000, 0x2fe000)

[ 1803.568060][T20160] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
04:45:50 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1803.635274][T20160] device vlan2 entered promiscuous mode
[ 1803.671696][T20143] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:45:50 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1803.704038][T20143] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1803.716319][T20160] device gretap0 entered promiscuous mode
[ 1803.755953][T20143] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

[ 1803.803204][T20143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23b000, 0x2fe000)

04:45:57 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:57 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:45:57 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:45:57 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:45:57 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23c000, 0x2fe000)

04:45:57 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1810.821943][T20295] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1810.835625][T20290] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1810.836837][T20295] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1810.855432][T20295] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1810.878641][T20295] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:45:57 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1810.921624][T20290] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1810.952675][T20290] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:45:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23b000, 0x2fe000)

[ 1811.004690][T20290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:45:57 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:45:57 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1811.446932][T20333] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1811.461174][T20333] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1811.493856][T20333] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1811.518044][T20333] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1811.524648][T20333] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1811.536278][T20333] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:05 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23d000, 0x2fe000)

04:46:05 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:05 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:05 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23c000, 0x2fe000)

04:46:05 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:05 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:06 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23e000, 0x2fe000)

04:46:06 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

[ 1819.296494][T20358] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1819.318696][T20358] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:46:06 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1819.340522][T20358] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:46:06 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1819.423625][T20358] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1819.456941][T20358] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1819.504019][T20358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:06 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1819.884164][T20394] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1819.896636][T20394] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1819.915034][T20394] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1819.926284][T20394] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1819.932861][T20394] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1819.944463][T20394] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x23f000, 0x2fe000)

04:46:14 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:14 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:14 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:14 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:14 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:14 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x240000, 0x2fe000)

04:46:14 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1827.982049][T20417] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:46:14 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x241000, 0x2fe000)

[ 1828.041675][T20417] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:46:14 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1828.090262][T20417] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1828.202905][T20417] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1828.222233][T20417] EXT4-fs error (device loop0): ext4_orphan_get:1251: comm syz-executor.0: bad orphan inode 4980744
[ 1828.309840][T20417] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 1828.330590][T20532] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1828.388143][T20532] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1828.422859][T20532] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1828.449726][T20532] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1828.464576][T20532] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1828.476009][T20532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:20 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:20 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:20 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x242000, 0x2fe000)

04:46:20 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:20 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:20 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x243000, 0x2fe000)

[ 1834.314615][T20575] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1834.337098][T20575] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1834.348796][T20575] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1834.378267][T20575] EXT4-fs (loop3): orphan cleanup on readonly fs
04:46:21 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:21 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

[ 1834.431617][T20575] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1834.471737][T20575] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:21 executing program 3:
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x244000, 0x2fe000)

04:46:27 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:27 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:27 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:27 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:27 executing program 3:
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:27 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x245000, 0x2fe000)

04:46:27 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x246000, 0x2fe000)

04:46:27 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1840.773385][T20727] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1840.784088][T20727] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1840.794348][T20727] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1840.808291][T20725] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1840.816780][T20727] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1840.839636][T20727] EXT4-fs error (device loop0): ext4_orphan_get:1251: comm syz-executor.0: bad orphan inode 4980744
[ 1840.851529][T20727] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 1840.875706][T20725] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:46:27 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x244000, 0x2fe000)

04:46:27 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:27 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x247000, 0x2fe000)

[ 1840.926183][T20725] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1840.957736][T20725] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1840.964564][T20725] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1840.989334][T20725] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:27 executing program 3:
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1841.386119][T20764] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1841.408670][T20764] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1841.418686][T20764] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1841.444933][T20764] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1841.451766][T20764] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1841.463806][T20764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:33 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:33 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:33 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x248000, 0x2fe000)

04:46:33 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:33 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:33 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:33 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x249000, 0x2fe000)

04:46:33 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1847.118604][T20788] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1847.128411][T20788] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1847.196706][T20788] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1847.219945][T20788] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1847.226382][T20788] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
04:46:34 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24a000, 0x2fe000)

04:46:34 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1847.241507][T20788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:34 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:34 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:34 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:34 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:34 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24b000, 0x2fe000)

[ 1847.770211][T20827] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1847.785012][T20827] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1847.795216][T20827] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1847.836258][T20827] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:40 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:40 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24c000, 0x2fe000)

04:46:40 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:40 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:40 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:40 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

04:46:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24d000, 0x2fe000)

[ 1853.628974][T20962] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1853.640447][T20962] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1853.650995][T20962] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:46:40 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

04:46:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

[ 1853.719765][T20962] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:40 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1854.080460][T21203] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1854.094813][T21203] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1854.128672][T21203] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1854.151746][T21203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:46 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24e000, 0x2fe000)

04:46:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24d000, 0x2fe000)

04:46:46 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:46 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

04:46:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24f000, 0x2fe000)

[ 1860.065485][T21220] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1860.085637][T21220] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1860.103210][T21220] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1860.126441][T21220] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1860.147366][T21220] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
04:46:46 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1860.188110][T21220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:47 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:47 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
readv(r0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:47 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x250000, 0x2fe000)

[ 1860.689657][T21243] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:46:47 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

04:46:47 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1860.768724][T21243] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1860.783203][T21243] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1860.853350][T21243] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:46:47 executing program 5:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:47 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1861.311041][T21473] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1861.330239][T21473] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1861.340333][T21473] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1861.362569][T21473] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[ 1861.508452][T21488] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1861.518717][T21488] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1861.528874][T21488] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1861.542875][T21488] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:46:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x251000, 0x2fe000)

04:46:53 executing program 5:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

04:46:53 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:53 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:53 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

04:46:53 executing program 5:
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000200)=""/84, 0x54}], 0x2)

[ 1866.508076][T21509] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1866.526972][T21509] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1866.537231][T21509] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:46:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x252000, 0x2fe000)

04:46:53 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, 0x0, 0x0)

[ 1866.560188][T21509] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:46:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:53 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, 0x0, 0x0)

[ 1866.842727][T21513] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1866.863735][T21513] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:46:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x253000, 0x2fe000)

[ 1866.884213][T21513] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1866.933588][T21513] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:46:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:46:59 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, 0x0, 0x0)

04:46:59 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:59 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:46:59 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

04:46:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x254000, 0x2fe000)

04:46:59 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}], 0x1)

04:46:59 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}], 0x1)

[ 1873.055048][T21569] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1873.068700][T21569] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:46:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x255000, 0x2fe000)

[ 1873.108412][T21572] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1873.111303][T21569] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1873.132686][T21572] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1873.156082][T21572] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1873.187647][T21572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 1873.246169][T21569] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:00 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:00 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:00 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}], 0x1)

04:47:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x256000, 0x2fe000)

04:47:03 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2)

04:47:03 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

04:47:03 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:03 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:04 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2)

04:47:04 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x257000, 0x2fe000)

04:47:04 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2)

[ 1877.525681][T21833] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1877.537862][T21833] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1877.572739][T21833] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1877.573853][T21836] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1877.612441][T21836] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:47:04 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/84, 0x54}], 0x1)

[ 1877.624206][T21833] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 1877.660409][T21836] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1877.700131][T21836] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:04 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x258000, 0x2fe000)

04:47:04 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1878.116090][T21878] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1878.126019][T21878] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1878.143278][T21878] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1878.154957][T21878] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x302300, 0x2fe000)

04:47:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:10 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{0x0}], 0x1)

04:47:10 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:10 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/84, 0x54}], 0x1)

04:47:10 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x302400, 0x2fe000)

04:47:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x302300, 0x2fe000)

[ 1884.032455][T21899] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1884.108676][T21899] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1884.123398][T21899] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1884.166085][T21899] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1884.192075][T21899] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1884.229858][T21909] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1884.231629][T21899] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[ 1884.239969][T21909] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:47:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x302500, 0x2fe000)

[ 1884.273120][T21909] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:47:11 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
readv(r0, &(0x7f0000001500)=[{&(0x7f0000000200)=""/84, 0x54}], 0x1)

[ 1884.300383][T21909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
04:47:11 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:11 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x330600, 0x2fe000)

04:47:11 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x302500, 0x2fe000)

04:47:11 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1884.936367][T22047] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1884.987572][T22047] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1884.997790][T22047] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1885.040069][T22057] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1885.041779][T22047] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1885.058770][T22047] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1885.078666][T22057] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1885.099732][T22047] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1885.106206][T22057] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1885.141128][T22057] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1885.149159][T22057] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1885.162828][T22057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:16 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:16 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x402300, 0x2fe000)

04:47:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x302400, 0x2fe000)

04:47:16 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:16 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:16 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x254000, 0x2fe000)

04:47:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x402400, 0x2fe000)

04:47:17 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:17 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

[ 1890.500676][T22087] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:47:17 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:17 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x253000, 0x2fe000)

[ 1890.555576][T22087] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:47:17 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x402500, 0x2fe000)

[ 1890.641681][T22087] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1890.716750][T22087] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1890.738691][T22087] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1890.786354][T22087] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086)

04:47:23 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x402400, 0x2fe000)

04:47:23 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x502300, 0x2fe000)

04:47:23 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:23 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x502400, 0x2fe000)

04:47:23 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:23 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:23 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1897.105284][T22451] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1897.132580][T22451] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1897.148669][T22451] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:47:23 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x502500, 0x2fe000)

04:47:24 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1897.191625][T22451] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1897.205588][T22451] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1897.219498][T22451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1897.567014][T22775] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1897.576974][T22775] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1897.587130][T22775] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1897.617596][T22775] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1897.632417][T22775] EXT4-fs error (device loop5): ext4_orphan_get:1251: comm syz-executor.5: bad orphan inode 4980744
[ 1897.643721][T22775] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
04:47:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086)

04:47:29 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:29 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:29 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:29 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x602300, 0x2fe000)

04:47:29 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:29 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x602400, 0x2fe000)

04:47:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x502500, 0x2fe000)

04:47:30 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1903.455153][T23177] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1903.479358][T23177] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1903.492503][T23177] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1903.516188][T23177] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1903.530817][T23177] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1903.549953][T23012] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
04:47:30 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x602500, 0x2fe000)

[ 1903.556813][T23177] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1903.609128][T23012] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1903.626774][T23012] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1903.652704][T23012] EXT4-fs (loop3): orphan cleanup on readonly fs
04:47:30 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1903.659465][T23012] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4980744
[ 1903.673720][T23012] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:30 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x24b000, 0x2fe000)

[ 1903.759156][T23251] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1903.778727][T23251] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1903.818146][T23251] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1903.891015][T23251] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1903.897391][T23251] EXT4-fs error (device loop5): ext4_orphan_get:1251: comm syz-executor.5: bad orphan inode 4980744
[ 1903.954609][T23251] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
04:47:40 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086)

04:47:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x702300, 0x2fe000)

04:47:40 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x602500, 0x2fe000)

04:47:40 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x702400, 0x2fe000)

04:47:40 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x702500, 0x2fe000)

[ 1914.017818][T23817] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1914.101678][T23817] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1914.151416][T23924] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1914.184687][T23924] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1914.198726][T23924] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1914.200360][T23817] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1914.224790][T23817] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1914.240250][T23817] EXT4-fs error (device loop5): ext4_orphan_get:1251: comm syz-executor.5: bad orphan inode 4980744
[ 1914.267663][T23817] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
[ 1914.282857][T23924] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1914.289506][T23924] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1914.304339][T23924] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1914.383795][T23826] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1914.400060][T23826] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1914.410095][T23826] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1914.435911][T23826] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:47:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:46 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:46 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:46 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x800000, 0x2fe000)

04:47:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:46 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x802300, 0x2fe000)

04:47:46 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1919.987081][T23971] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1920.049998][T23971] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1920.080190][T23971] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:47:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x800000, 0x2fe000)

04:47:46 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1920.146519][T24001] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1920.175932][T23971] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1920.184101][T24001] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1920.196231][T24001] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1920.208268][T24001] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1920.215053][T24001] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1920.226828][T24001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1920.228449][T23971] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4915208
04:47:47 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1920.322225][T23971] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:47 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1920.848017][T24322] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1920.858137][T24322] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1920.889667][T24320] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1920.903425][T24322] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1920.912235][T24320] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1920.923029][T24320] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1920.928015][T24322] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1920.944350][T24322] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1920.947434][T24320] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1920.955760][T24322] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1920.964576][T24320] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4915208
[ 1920.986864][T24320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:47:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x802400, 0x2fe000)

04:47:50 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:50 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:50 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:50 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:50 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:51 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1924.204344][T24349] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1924.231472][T24349] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1924.242132][T24349] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:47:51 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1924.274474][T24349] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1924.283277][T24349] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4915208
[ 1924.314112][T24349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
04:47:51 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x802500, 0x2fe000)

04:47:51 executing program 4:
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:51 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1924.572843][T24676] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1924.630988][T24676] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1924.684432][T24676] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1924.720374][T24676] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1924.752401][T24676] EXT4-fs error (device loop0): ext4_orphan_get:1251: comm syz-executor.0: bad orphan inode 4915208
[ 1924.766012][T24791] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1924.847861][T24676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 1924.867466][T24791] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1924.934181][T24791] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1924.962178][T24791] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1924.972805][T24791] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1925.000784][T24791] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
04:47:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:47:56 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:56 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:56 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x902300, 0x2fe000)

04:47:56 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:56 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:57 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:57 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0x902400, 0x2fe000)

04:47:57 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1930.574990][T25022] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1930.591319][T25022] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1930.616690][T25042] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1930.638642][T25042] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1930.643190][T25022] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1930.648450][T25042] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1930.678212][T25042] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1930.700916][T25042] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
[ 1930.750777][T25042] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1930.776476][T25022] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1930.792098][T25022] EXT4-fs error (device loop5): ext4_orphan_get:1251: comm syz-executor.5: bad orphan inode 4980744
04:47:57 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1930.867505][T25022] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
04:47:57 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:47:57 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1931.093393][T25257] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1931.103709][T25257] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1931.113859][T25257] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1931.139079][T25257] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1931.145478][T25257] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4915208
[ 1931.176726][T25257] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[ 1931.245138][T25372] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1931.270288][T25372] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1931.289987][T25372] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1931.339667][T25372] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1931.346243][T25372] EXT4-fs error (device loop0): ext4_orphan_get:1251: comm syz-executor.0: bad orphan inode 4980744
[ 1931.369649][T25372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:48:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:48:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xa02300, 0x2fe000)

04:48:03 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xa02400, 0x2fe000)

04:48:03 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1936.864555][T25508] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1936.904442][T25508] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1936.914876][T25508] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1936.932732][T25508] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1936.940795][T25508] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4980744
04:48:03 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb02300, 0x2fe000)

[ 1937.016773][T25508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1937.299444][T25892] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1937.320012][T25892] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1937.331760][T25892] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1937.388722][T25892] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1937.395113][T25892] EXT4-fs error (device loop0): ext4_orphan_get:1251: comm syz-executor.0: bad orphan inode 4915208
[ 1937.415294][T25892] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
04:48:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)

04:48:09 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:09 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb02400, 0x2fe000)

04:48:09 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xa02400, 0x2fe000)

04:48:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xa02300, 0x2fe000)

04:48:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xb60200, 0x2fe000)

[ 1943.189665][T26179] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1943.199936][T26179] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1943.222798][T26179] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1943.268701][T26179] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1943.280840][T26179] EXT4-fs error (device loop3): ext4_orphan_get:1251: comm syz-executor.3: bad orphan inode 4915208
[ 1943.309246][T26179] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
04:48:10 executing program 0:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

04:48:10 executing program 3:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1943.354826][T26187] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1943.406074][T26187] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
04:48:10 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x10)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1943.468740][T26187] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1943.486280][T26187] EXT4-fs error (device loop5): ext4_fill_super:4532: inode #2: comm syz-executor.5: iget: root inode unallocated
[ 1943.508015][T26187] EXT4-fs (loop5): get root inode failed
[ 1943.514003][T26187] EXT4-fs (loop5): mount failed
04:48:10 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000000)=0xc02300, 0x2fe000)

[ 1943.811522][T26213] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1943.821605][T26213] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1943.821617][T26204] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1943.821649][T26204] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1943.832181][T26213] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
04:48:10 executing program 5:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x1410, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x10)
pipe(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1943.862791][T26204] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1943.874887][T26213] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1943.890205][T26213] EXT4-fs error (device loop4): ext4_orphan_get:1251: comm syz-executor.4: bad orphan inode 4915208
[ 1943.903409][T26204] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 1943.914756][T26213] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[ 1944.244441][T26339] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1944.254697][T26339] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1944.264663][T26339] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1944.284616][T26339] EXT4-fs error (device loop5): ext4_fill_super:4532: inode #2: comm syz-executor.5: iget: root inode unallocated
[ 1944.320271][T26339] EXT4-fs (loop5): get root inode failed
[ 1944.325954][T26339] EXT4-fs (loop5): mount failed
[ 1951.324297][T26352] ==================================================================
[ 1951.332565][T26352] BUG: KCSAN: data-race in balance_dirty_pages / percpu_counter_add_batch
[ 1951.341036][T26352] 
[ 1951.343359][T26352] write to 0xffff8881207fbc68 of 8 bytes by task 11862 on cpu 0:
[ 1951.351067][T26352]  percpu_counter_add_batch+0xbc/0x140
[ 1951.356523][T26352]  clear_page_dirty_for_io+0x4cd/0x5a0
[ 1951.361992][T26352]  mpage_submit_page+0x64/0x190
[ 1951.366830][T26352]  mpage_map_and_submit_buffers+0x35d/0x610
[ 1951.372812][T26352]  ext4_writepages+0x1176/0x1d40
[ 1951.377731][T26352]  do_writepages+0x6b/0x170
[ 1951.382238][T26352]  __writeback_single_inode+0xaa/0x910
[ 1951.387699][T26352]  writeback_sb_inodes+0x4c8/0xa10
[ 1951.392837][T26352]  __writeback_inodes_wb+0xe9/0x1b0
[ 1951.398029][T26352]  wb_writeback+0x557/0x6a0
[ 1951.402516][T26352]  wb_workfn+0x66b/0x970
[ 1951.406759][T26352]  process_one_work+0x424/0x930
[ 1951.411594][T26352]  worker_thread+0x9a/0x7e0
[ 1951.416079][T26352]  kthread+0x1cb/0x1f0
[ 1951.420132][T26352]  ret_from_fork+0x1f/0x30
[ 1951.424523][T26352] 
[ 1951.426840][T26352] read to 0xffff8881207fbc68 of 8 bytes by task 26352 on cpu 1:
[ 1951.434462][T26352]  balance_dirty_pages+0x1012/0x1ab0
[ 1951.439744][T26352]  balance_dirty_pages_ratelimited+0x6f9/0xa20
[ 1951.445882][T26352]  generic_perform_write+0x224/0x320
[ 1951.451163][T26352]  ext4_buffered_write_iter+0x14e/0x280
[ 1951.456724][T26352]  ext4_file_write_iter+0xf4/0xd30
[ 1951.461816][T26352]  new_sync_write+0x303/0x400
[ 1951.466473][T26352]  __vfs_write+0x9e/0xb0
[ 1951.470696][T26352]  vfs_write+0x189/0x380
[ 1951.474933][T26352]  ksys_write+0xc5/0x1a0
[ 1951.479172][T26352]  __x64_sys_write+0x49/0x60
[ 1951.483752][T26352]  do_syscall_64+0xc7/0x390
[ 1951.488242][T26352]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1951.494108][T26352] 
[ 1951.496417][T26352] Reported by Kernel Concurrency Sanitizer on:
[ 1951.502556][T26352] CPU: 1 PID: 26352 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[ 1951.511205][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1951.521246][T26352] ==================================================================
[ 1951.529302][T26352] Kernel panic - not syncing: panic_on_warn set ...
[ 1951.535873][T26352] CPU: 1 PID: 26352 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0
[ 1951.544535][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1951.554567][T26352] Call Trace:
[ 1951.557846][T26352]  dump_stack+0x11d/0x187
[ 1951.562223][T26352]  panic+0x210/0x640
[ 1951.566110][T26352]  ? vprintk_func+0x89/0x13a
[ 1951.570772][T26352]  kcsan_report.cold+0xc/0xf
[ 1951.575350][T26352]  kcsan_setup_watchpoint+0x3fb/0x440
[ 1951.580769][T26352]  balance_dirty_pages+0x1012/0x1ab0
[ 1951.586473][T26352]  ? __ext4_journal_start_sb+0xd8/0x250
[ 1951.592004][T26352]  ? ext4_setattr+0x1290/0x1290
[ 1951.596856][T26352]  balance_dirty_pages_ratelimited+0x6f9/0xa20
[ 1951.603000][T26352]  generic_perform_write+0x224/0x320
[ 1951.608312][T26352]  ext4_buffered_write_iter+0x14e/0x280
[ 1951.613841][T26352]  ext4_file_write_iter+0xf4/0xd30
[ 1951.618948][T26352]  new_sync_write+0x303/0x400
[ 1951.623707][T26352]  __vfs_write+0x9e/0xb0
[ 1951.627931][T26352]  vfs_write+0x189/0x380
[ 1951.632158][T26352]  ksys_write+0xc5/0x1a0
[ 1951.636412][T26352]  __x64_sys_write+0x49/0x60
[ 1951.640995][T26352]  do_syscall_64+0xc7/0x390
[ 1951.645492][T26352]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1951.651363][T26352] RIP: 0033:0x45c849
[ 1951.655242][T26352] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1951.674830][T26352] RSP: 002b:00007fc752430c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1951.683222][T26352] RAX: ffffffffffffffda RBX: 00007fc7524316d4 RCX: 000000000045c849
[ 1951.691189][T26352] RDX: 0000000000400086 RSI: 0000000020000200 RDI: 0000000000000003
[ 1951.699268][T26352] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1951.707223][T26352] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1951.715178][T26352] R13: 0000000000000ce1 R14: 00000000004cf05a R15: 000000000076bf0c
[ 1951.724444][T26352] Kernel Offset: disabled
[ 1951.728769][T26352] Rebooting in 86400 seconds..