8] sget+0x110/0x510 [ 2022.754445] ? __put_super.part.0+0x2a0/0x2a0 [ 2022.755113] mount_bdev+0xf8/0x400 [ 2022.755644] ? msdos_mount+0x40/0x40 [ 2022.756198] ? setup+0xd0/0xd0 [ 2022.756679] legacy_get_tree+0x105/0x220 [ 2022.757288] vfs_get_tree+0x8e/0x300 [ 2022.757830] path_mount+0x1429/0x2120 [ 2022.758413] ? strncpy_from_user+0x9e/0x470 [ 2022.759059] ? finish_automount+0xa90/0xa90 [ 2022.759688] ? getname_flags.part.0+0x1dd/0x4f0 [ 2022.760392] __x64_sys_mount+0x282/0x300 [ 2022.760981] ? copy_mnt_ns+0xa00/0xa00 [ 2022.761564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.762333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.763101] do_syscall_64+0x33/0x40 [ 2022.763643] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2022.764396] RIP: 0033:0x7f4b8d524b19 [ 2022.764939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.767631] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2022.768736] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2022.769792] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2022.770853] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.771908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.772959] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2022.789484] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2022.791969] FAT-fs (loop6): unable to read boot sector [ 2022.993027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2022.993565] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2022.994558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2022.995048] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2022.996021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2022.996493] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2022.997460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2022.997958] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2022.998919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2022.999388] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2023.000343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.000816] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2023.001778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.002278] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2023.003236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.003706] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2023.004653] buffer_io_error: 6 callbacks suppressed [ 2023.004661] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2023.005780] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2023.006468] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2023.007158] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2023.007819] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2023.008504] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2023.009189] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2023.009858] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2023.042354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.042865] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2023.049999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.050505] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2023.051260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.051926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.052493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.053082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.053645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2023.054442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:20:17 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) ioctl$TUNGETFILTER(r0, 0x400454dc, &(0x7f0000019740)=""/102400) 00:20:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, 0x0, &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'hsr0\x00'}}, 0x0, 0x0, 0x1}, 0x0) 00:20:17 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:20:17 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2040.814426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7573726a716b6f7461332c64656c616c6c6f632c00b2e0c0a488d15de63a038d8d8bc8b96ada690a3bc22cbe089d1966123b77947d4a6197a23f45850ca1978a29c30370c5a2f24fcf058ec53fc03ff0ae61eacba9975d568017fe"]) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x40034, 0x0) pkey_alloc(0x0, 0x2) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000000c0)=0x27, 0x4, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000140)={0x3, 0xad}) 00:20:18 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x4b49, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:18 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2040.863672] FAULT_INJECTION: forcing a failure. [ 2040.863672] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.865460] CPU: 0 PID: 24208 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2040.866526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2040.867828] Call Trace: [ 2040.868250] dump_stack+0x107/0x167 [ 2040.868833] should_fail.cold+0x5/0xa [ 2040.869445] ? create_object.isra.0+0x3a/0xa20 [ 2040.870194] should_failslab+0x5/0x20 [ 2040.870780] kmem_cache_alloc+0x5b/0x310 [ 2040.871404] ? mark_held_locks+0x9e/0xe0 [ 2040.872039] create_object.isra.0+0x3a/0xa20 [ 2040.872725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2040.873512] kmem_cache_alloc_trace+0x151/0x320 [ 2040.874250] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2040.875005] __list_lru_init+0x44d/0x890 [ 2040.875645] alloc_super+0x8b8/0xa90 [ 2040.876223] ? test_bdev_super_fc+0x80/0x80 [ 2040.876898] sget+0x110/0x510 [ 2040.877386] ? __put_super.part.0+0x2a0/0x2a0 [ 2040.878078] mount_bdev+0xf8/0x400 [ 2040.878640] ? msdos_mount+0x40/0x40 [ 2040.879227] ? setup+0xd0/0xd0 [ 2040.879723] legacy_get_tree+0x105/0x220 [ 2040.880368] vfs_get_tree+0x8e/0x300 [ 2040.880941] path_mount+0x1429/0x2120 [ 2040.881555] ? strncpy_from_user+0x9e/0x470 [ 2040.882232] ? finish_automount+0xa90/0xa90 [ 2040.882889] ? getname_flags.part.0+0x1dd/0x4f0 [ 2040.883625] __x64_sys_mount+0x282/0x300 [ 2040.884252] ? copy_mnt_ns+0xa00/0xa00 [ 2040.884869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2040.885673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2040.886470] do_syscall_64+0x33/0x40 [ 2040.887042] entry_SYSCALL_64_after_hwframe+0x67/0xcc 00:20:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@empty, @random="d4becf37f638", @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "a0545826195284b2"}}}}, &(0x7f0000000040)={0x1, 0x4, [0xcb, 0xb63, 0xd14, 0x77b]}) [ 2040.887820] RIP: 0033:0x7f4b8d524b19 [ 2040.888585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2040.891336] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2040.892502] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2040.893609] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2040.894705] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2040.895812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2040.896902] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2040.907076] print_req_error: 24 callbacks suppressed [ 2040.907121] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2040.927552] FAT-fs (loop6): unable to read boot sector [ 2040.928827] EXT4-fs (loop2): Unrecognized mount option "usrjqkota3" or missing value 00:20:18 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, 0x0, &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, 0x0, &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) r13 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = epoll_create(0x1625) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2057.241344] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r0, 0x0) r3 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0xe19fe65af119b872, r3, 0x10000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r4, 0x102400) 00:20:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 74) 00:20:34 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:34 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1e0001ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000a7b5b849eeee661d34c2df00040000000000209036486f275801db00577163caca122000000000000000005afae06f552fea61daebbe739393740bcc9fb0d15e6db98b877b666b91e2e49a56d61066d261236f85db04e95dd627207002e3378dab6d66d9bd78beb3ee8fe44891f40404fb07e888817425f08f5b2821211ef370812560532bd12a670059f5f8dbc9d91f523547f23289e157ad1b1e49591b4ae2e1b77a63995731da0e4fc4eaf9882cafeed23131c47d4837197a5d81b281311b5dab8b5bb9e2f04947db"], 0x0) syz_emit_ethernet(0x10f6, &(0x7f0000000140)={@random="dd2491d5ece5", @multicast, @void, {@ipv4={0x800, @igmp={{0x38, 0x4, 0x2, 0x3d, 0x10e8, 0x67, 0x0, 0x1d, 0x2, 0x0, @remote, @broadcast, {[@end, @timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0x4, [{@remote, 0x1}]}, @rr={0x7, 0x7, 0x52, [@remote]}, @rr={0x7, 0xf, 0x74, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0x41, 0x3, 0x2}, @ssrr={0x89, 0x2b, 0x2d, [@local, @multicast2, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @multicast2, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xcb, 0x3, 0xf, [{@remote, 0x10000000}, {@loopback, 0x3}, {@remote, 0x3}, {@empty, 0x8}, {@local, 0x10000}, {@multicast2, 0x1}, {@empty, 0xffff}, {@local, 0x2}, {@rand_addr=0x64010100, 0x9}]}, @rr={0x7, 0xf, 0xce, [@broadcast, @multicast2, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0x59, [@broadcast, @empty, @empty]}, @lsrr={0x83, 0xf, 0x1e, [@rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3}]}]}}, {0x22, 0x1, 0x0, @private=0xa010101, "37e9448b573937bf11251f43686e7b991eab98995853e6c135054b130f0596494907bfd822af651a5e426f102426568640261f453cbed8509e4dea1a444a177564c4c850e18dc8de017bf67744b3c79a5717e0a390dfb78be45653091ad6d5a760239105a8866908321804c4f0d99bbd3d2b452a77a49975b65ce59d49acea55b2d92658605db849b7ea98aa5b3e325b648c943ee3205f4463d0509c83833e59a7f7bf654325596850497d7f845c8b0743f39b46b02f6da645ef0d8cb5bb807f487d6cffcbca0c309aa9de4ddbc5b99aa869072fa7f4ee5f0e1b71515341b24e6b87a50779e65ead6bb751e681dc85f9d554890a48534c38ccad02b54531fa6c16a444fac62d5dc4671aba55bc33b5035076851137c0d5a2ebeef892d506512231ccfd536c1a434fcb140ca7a7af61e261cfe17595e9fc811d48592aeb5ce27e62934942a60d556b07e100e535fbac5e009c388bab6382ad80d4b69c6a2ff78ccfc9877958c6b637d85fb822ea1c39bcb35ca4e265b6801ba57d81156948db4a323c92c5764f6e41084587744261f0fa17a090f9c2ecb48c8a76e65d838f6d1679288b694e99d783d34d5bef29bbbc09e8d19fee5de98ea659b10f03e40f19a07e011046ffb79099a1825dceb897dac63195102a074322890fb87da119ca98624a4bf5517e86855d8c3b19198bc38bd3e6b05bc77caaa9fdbe8462f0f8ca6c8a0537bc2682eb953f3d70da3cc19e88e87dee4dece80357867c54a2553d2c741eb18a259e36bdb09edef54f07bb421a2aac1afd8a96cfa319e952cb894f4e72b1d58fecd003eea5e95a0c8c35ed914bd77967734b2116283ce59b4845b53c98e44844288fc5e32294d29f171f0ae6c916376862dfcc3f88eb3d2472c728816683c47335c791cbd1de5e158da63cbfce1c705281ce844fa00c8ef25fcbbe5ad655bee0f171868acbb50781ed2a104b2ac52e5acb1c480524bbda275775c6ff621d2c79d74775c6f1c0be5d75ffdd80cd57cbc42b87eb992c46f6871fa67ba3ed8ca057ed7088bf8cda74a863d8e04c26fdeedf8ad871ddcae92edcd89c9cca1c33caa6159fedd513f9473c04e74c84d1af7ea07d6d56f092da2f4afc90f7411dd065eaee18b7f533f12f5ba17e1af6c61c88b9bacd93241dbeba5046a3486e9185b251217771f57d0ed03b384d65d54748065e9934234f2672965cc2d266e7fd627cbd613a787fda90569ff005796a3fe85acd5660509b850e82cb32ed255b09fbe334bbcefa108e530049cb1a778963c852a6e9cab08d4cee27b73f79031e3e31afba9428dbd9baa7ee8fd794c66bb9d6f1f76c9cd508384b89bd1d585a08d7f98eb5d423e3ff3dfd1a924a4192ffbc1679d15c3dfef5e2973e4073de47b8ca00945d89a2d759da358c7dfc61086b9d052d3150b05d3c4b17505a06e7674d639f257a48d87249609d3689cc015758d30505699472887b7c6daa5640e8f6662450b18ee77c24e68a345c8c19b428d1084f667615f55cd97e43aaadfdbb49b35910687d0a38531882a9fad369d267d44178350d199d211bf23c93332b3117d2604d80c2851b20b88f64e270998371efd07b50c9aa4a3dd00557e4f9f52e31ed89f173806c8c1e003a6403d2d2ee303f86b515e0bf529e9d2978a6cbd31a68ea3a39573e77edb95677a6fab4ed2c0a4ef6b7992205b63e03169f4236d58cd15e50011b1a86317ff89d0beba1dc283f241f0e62f095a0626bea7a218d5972c3f882808aaf98ed08cfd340adcce7af9e16d43b52152b0df177656927eb48babcdfc15be51ea3d63b28f153983d851732911291faf19790de96043ac48dff9200ba76007fdcb009397a3c3bca20561d69c4bdf014dd15d216512d80bb7c339558155ea8a654e79db5e9b3f3ec0d85dd076fb048f0f2567c151d01b086d26f059c84070b1e4bac067335153a78971a78b5e982deeefe30db0cb293beafdf0190c48fc036653ee2613f71c135b385770f25f80a11aa2d4dffb03bbff4b54a761a5cc1c53907365731471cacf9b3de1939f0b0324198f0739a3de0c80d02bc86541408b17274fb5c7e3519936c3f333b4ff71147abcf727ad7cd050620d61e8e0284481f02431dbf8fb0f1bfeac4eca7d0fb27c0d527747a487b54befbf8ed45ebcedc4884f5e73e06e7ac1f54f8ff800e2675b6b25352ba78df74747b11b696e01f098ba046ce157a8f1c941fcc0fcf9292bcd1efd1db19aeff1c117b7b3efe9ed633c4514d9e7fec2bf086b9fdb7de3b01f51b8bdaf60544d90100044df2f4ec2b6b0fd6c238cac9c576bb383a52d3c75e70890d74b3be3582efa2c091b88011dfd93a336cd57b54c296e6f04bc9942962cdde26ac7a343e3bbeb56be2b040c0c27f09728fb565a01733e4b9c81f1cdeef9d39fa4620d4794d3a583f2ddf0f300b50fdb3041d0c9353cc44ab7e9c40f743e583013c1f459a4f3b71776634626d3c8102ba2b3cfe98d7076a09f2a80cbf410bfe34e3036f5e2dda6965b6970710ba366018139e61339ef3fab8afe61a503ac593e1a7fb9d7d0afd4b628ace8c516d7677d1cdda833a707c7f601ceeded5043f18ed91db6f78e67a96b5ac2681928a153d5b9e69c9227ed35dbf4763ee9cb5aa6e166779ac71649159aea545729a1ac25100a97dcc406dcb549941d30a277e3dfc09c859c9a95fcab080c539e5d481d47109e925bdf8afbe2a6de0e7d6e9d59cca4e1081a791a5f016a26c7e5eec3fc076847b9418e928efb1a179688d482f73c7f964e6317bbd19e36b8b3725b962f6a85846f32748af6274d1d74758c51a8d2eebb134f91846e78bf48a7f2c0586031be9401f80840c107124fddd4488654693ace8783bafd396fc1f5469c368800644056b3b35b77ad9d31d44cfd0f8c1ed77f80887399e136600fd75353a2e58eb3708dc0479d3969e6a8b96c61d8462b421474347b15040769c567eaaf0631e23415c0b506b206aa5655ba254f67db94bea64cf19b245763cce56ac8d4ebc78fd2f63fda680931d84e552ad25549910d174a45264f5abb5e246654fd8b32a3009de43d8ded459c5f4e97d8f95cb779153c442e503d4bc14c139a6abde86ac1d99ee17ed906ed2812caa145a4aba5fe25a4b507a80d9f2ea28f3ff946d55b8b33e4a8a322faff7f179511dbd5fff832aec031d0b0428a9385122068a5859379f54c19bc02c88bcae2dd7d6bd1ea98fd2642ac863745dbc43c17c54d43d9d07076eb923624e1853e2b850c43f7047b206ba018a2540b482f2d31901fd5300dc48bea17b16141a8c6b58127f99b62c7d13dced7427219ec80e0815d0c0f8345a05656f4c8342e08858aa808fff8b6a316e1c5825607aae98fad30b1cf3aa65b1b31a63fe03314c503871f57d3cc6de89810bded65e9b238a9169e670213a77c10f87a2427ed69e6628354363542eaeb76949f76f1f4756bad45ca996a31028568ccfaf63acaf26528f71808109997b3b578cb056919a01d364dada5059cde5d521335bf5cd46c147bd3fc135d29e95d3f6b04813e4fcd80fc1a2f91757a33481589bf6ed42c8fdd86862be03ed60422ed469a3d21d68bd2eadc5cf44551c0be94f48e8a55c7b5d85abf463f5bc6286cd7bcf681d0a93c9d66dc624dbfb642aa9a9ae12477e4d8864e566a4f14856191a6977aa52b00f2c6073f64d9cffc6bbb3812fc52d93a8a6abd9802c13ad04819aa1991257c5bff1b31f54cad4f9c2f4ea38b221c36095322972cef14fecc4a2269f2b126c853ccf60b7396e6bb276f53674b914bbdad86eba28fbf47c373ebeda7631cee6893027dfdcc58bc20e4491ccdbaba502c08a67c0603ab74ceb9a8ee1a277337e7c5ef49c8f5dc72d0e5856f33886efaefc112e1f57492d8876ae66f5a696d8ae59c2f2762904a5110d85c8c5ddd4f320f1b8559d03ab1f88ac231ac6d41cdedbf116841199a2096ae1740c5fc8c28190628c3b3f5b57d92a8f107bed439b986325356d48ae9ff3f863111b3a0cc55a9a4db98abb4fbfe3e23bfbe85496adcc1d4ca7f7c0b5086c2f4aa28db86f2b136b7f38ccdb8e4bcd0bbba8558d18acf729a1f164ea6d55d401514b0c89095abc74a6dd12d46c6f180a454075faa5393d4703151824fc8ccfefa3eda0ebe441a72880a0c83bb9c9b80821dff30913612d3bdd79a17dc23eccb4756b99c43fe57e522869b97f8a5d558a4d7876ffe933d0067d6e2362946b57aaf6504c41fc067537b0c9af2d0d84db03f4ece2d7ff175d4e491f9cbf883eba4ec2ed6f767c49d85784f8281bab6d67f93fbc3d320fd444126747732af9ad41c399d479a79583808a8a176914831a2313035daf64eb7819122b645f9f1a36a833f774e59d219f9166aae77d2b8870d4c697f8e512ea54d83e9625c94c5d48d63b856f7c40f08c9b0fe6497f5f23730b5a8f8cd0612112fd30d33d6779a15d8f2327c691a5d6015154a5ff7710ded04b9064d71987587178c6086fb4809a904b146e6fea1fa9b881bb948c79fd8ba17e1845bc080a638f935738ad013c310766b7cfdc937538d88fc0e483247bfdef517ab9f6053a5d523d43111a1dd8d355314e4d4163aeb10bf6309baf98963086ba436f9976ec6d0f72fb73802967667cef8d7ae923569113d23727b7d9c5bb7cbbf18d80c7e5a84b306287acd705e0372f763dd08918ddb5d6049dcf08d365b1f92c5e27b61c1ec902fce97fb4f8714b47326c5950e7eadb2715245983b7e847be1ee15e698c33fa4dea299c5da7302d81e24b60bec2e6de74caf7ecc3cdf77dd1835e9f35505dce678d266a5b19012cdeedce9cec9924a2a35fbc0e7cc2d07a881e33a2b4d5416f647789134825afd2c8aea28012254db20bc580922b043f7e72860f56c481cc75d6ce628b4d2e05f8d0c8bad274773576fa139004898f87ff1221602469ab21300130b1486e91d1d2f1a3c5c57f0e951ac6e32123ef8a48ec5f768fc33c08e7ef53fa45b3d3942200755d300f845b2d1437f39b3cbbe3311f85106d6df336b8be4fafb1c9359c048731305c264507cb279d58cb402c626235c17ceeb3cf724badbb5373c0329d3fbc5cf07daa69b3229400b2c599acc27d4c4f3c1f4e3150ff482a7035c1180bf6a295810b51d5e5d50c51d2e352b809149826c09e8892cd962bf0dc116a17bd7a39406a58d847cbd3dd59f2a48f7fdf33253fe14a7e01d7123db5cec41cad96f978ae8093183fd574d2d50e5e063ed096849860a78793fc7925f1a2ea4adf884d16b9f8f68b96b40d6784bc18e2eb70a2115260548b34968a32a7cd50f77d2aed172239e8f2ca40ac7384a63029594d621c62567adf4cd8800de1ce53d6a48a1b9300cde67ae2e5c069aae887bfb15e36a119bb1a391ae7eac16b70a19d78edea97d754ed01e32c0f487f3333d644328b5601ea276261a259086aae73e91900b794830fbe5162817e42de56020b576324f900cb89f497d6c294907332ef00123f6cdac92543a4c263d18052280e86d488b1942202d3377d31066ed97ebb579840430e649128a16f826d2f8eac1a3e7c6e74669f920ff46594d5da43715988f02a7b57ab3b9a66ecb33953d92747d496deb8978fdffca573cfc2bdfeabbcad6ffd1767e4c065497adaeeefe88eae17d7061e9a18972cdbf48275f4aa2773fbed9d80fe21fd402559382d9264dccdba4ea5753655dc9cc80caf11eb0eb9784e091f2bcb05d68d04998b8bd262617edae3088d1a0f23aafbae5b96370d74d4edb7570769d38d8eb04f5ee4d4fc"}}}}}, 0x0) 00:20:34 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) [ 2057.288235] FAULT_INJECTION: forcing a failure. [ 2057.288235] name failslab, interval 1, probability 0, space 0, times 0 [ 2057.290000] CPU: 1 PID: 24531 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2057.291014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2057.292227] Call Trace: [ 2057.292621] dump_stack+0x107/0x167 [ 2057.293176] should_fail.cold+0x5/0xa [ 2057.293746] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2057.294499] should_failslab+0x5/0x20 [ 2057.295066] kmem_cache_alloc_trace+0x55/0x320 [ 2057.295735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2057.296485] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2057.297204] __list_lru_init+0x44d/0x890 [ 2057.297811] alloc_super+0x8b8/0xa90 [ 2057.298383] ? test_bdev_super_fc+0x80/0x80 [ 2057.299039] sget+0x110/0x510 [ 2057.299514] ? __put_super.part.0+0x2a0/0x2a0 [ 2057.300190] mount_bdev+0xf8/0x400 [ 2057.300716] ? msdos_mount+0x40/0x40 [ 2057.301275] ? setup+0xd0/0xd0 [ 2057.301762] legacy_get_tree+0x105/0x220 [ 2057.302390] vfs_get_tree+0x8e/0x300 [ 2057.302936] path_mount+0x1429/0x2120 [ 2057.303511] ? strncpy_from_user+0x9e/0x470 [ 2057.304160] ? finish_automount+0xa90/0xa90 [ 2057.304811] ? getname_flags.part.0+0x1dd/0x4f0 [ 2057.305513] __x64_sys_mount+0x282/0x300 [ 2057.306114] ? copy_mnt_ns+0xa00/0xa00 [ 2057.306700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2057.307479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2057.308243] do_syscall_64+0x33/0x40 [ 2057.308798] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2057.309552] RIP: 0033:0x7f4b8d524b19 [ 2057.310108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2057.312756] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2057.313852] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2057.314889] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2057.315920] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2057.316952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2057.317999] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:20:34 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:20:34 executing program 1: personality(0x5000004) r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000005340)='keyring\x00', &(0x7f0000005380)) r2 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, r5, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f}) keyctl$chown(0x4, r0, r3, r5) keyctl$chown(0x4, r1, r2, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000005340)='keyring\x00', &(0x7f0000005380)) keyctl$revoke(0x3, r0) r7 = fork() r8 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000005340)='keyring\x00', &(0x7f0000005380)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, 0xee01, r6, r2, 0x0, 0x10, 0x1f7}, 0xfff, 0xffffffff, 0x6, 0x0, r7, r7, 0x6}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "10231faeb469d747921fdbb2f2abf5c960c71877464d319fd18b15306b1a4127035d2e6214cabd886b8c258be4fb11e63a4e54354c47dc4b17002698d1beb740", 0x3c}, 0x48, r8) syz_emit_ethernet(0x9a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0008004e00008c0000000000069078ac1e0001ac1414bb820ae442b857d8dfd73444048855831bd0ac1414bbffffffffac1414160a0101017f000001ffffffff891f60ac1414bbffffffffe00000027f000001ac1414aaac1e0001ac1e010189088c558c6531ed0713c7ac14141764010102ffffffff640101020000004e21dc6ef2b5f7857e0dcd8767e97f95ef5e32c480b533612e0b9436d2f61a32882c9896c339d1447d4b51b48fb62d21f1c6e553092387b67cbf3f41a4a5227401b99d64bc3815685293213765e4ffb3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000001000000"], 0x0) 00:20:34 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) r13 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = epoll_create(0x1625) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 00:20:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 75) 00:20:34 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x5421, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:34 executing program 5: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2057.568671] FAULT_INJECTION: forcing a failure. [ 2057.568671] name failslab, interval 1, probability 0, space 0, times 0 [ 2057.570667] CPU: 0 PID: 24744 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2057.571737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2057.573003] Call Trace: [ 2057.573427] dump_stack+0x107/0x167 [ 2057.574052] should_fail.cold+0x5/0xa [ 2057.574732] ? create_object.isra.0+0x3a/0xa20 [ 2057.575445] should_failslab+0x5/0x20 [ 2057.576038] kmem_cache_alloc+0x5b/0x310 [ 2057.576671] ? mark_held_locks+0x9e/0xe0 [ 2057.577496] create_object.isra.0+0x3a/0xa20 [ 2057.578267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2057.579340] kmem_cache_alloc_trace+0x151/0x320 [ 2057.580083] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2057.581061] __list_lru_init+0x44d/0x890 [ 2057.581780] alloc_super+0x8b8/0xa90 [ 2057.582537] ? test_bdev_super_fc+0x80/0x80 [ 2057.583214] sget+0x110/0x510 [ 2057.583844] ? __put_super.part.0+0x2a0/0x2a0 [ 2057.584554] mount_bdev+0xf8/0x400 [ 2057.585258] ? msdos_mount+0x40/0x40 [ 2057.585918] ? setup+0xd0/0xd0 [ 2057.586580] legacy_get_tree+0x105/0x220 [ 2057.587278] vfs_get_tree+0x8e/0x300 [ 2057.588019] path_mount+0x1429/0x2120 [ 2057.588691] ? strncpy_from_user+0x9e/0x470 [ 2057.589553] ? finish_automount+0xa90/0xa90 [ 2057.590329] ? getname_flags.part.0+0x1dd/0x4f0 [ 2057.591274] __x64_sys_mount+0x282/0x300 [ 2057.591914] ? copy_mnt_ns+0xa00/0xa00 [ 2057.592696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2057.593513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2057.594565] do_syscall_64+0x33/0x40 [ 2057.595154] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2057.596161] RIP: 0033:0x7f4b8d524b19 [ 2057.596816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2057.600423] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2057.601645] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2057.603063] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2057.604459] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2057.605858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2057.607269] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:20:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r0, 0x0) r3 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0xe19fe65af119b872, r3, 0x10000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r4, 0x102400) [ 2057.646722] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:34 executing program 5: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2057.695125] print_req_error: 7 callbacks suppressed [ 2057.695148] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2057.713821] FAT-fs (loop6): unable to read boot sector [ 2058.264092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.265239] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.267361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.268410] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.270466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.271514] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.273561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.274623] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.276650] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.278676] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2058.280148] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.282148] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2058.283638] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.285617] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2058.287096] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.289075] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2058.291652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.292713] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2058.294811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.296010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.297159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.303091] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2058.304570] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2058.306031] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2058.307530] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2058.360649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.361631] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2058.361680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.363610] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2058.363672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.365600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.366575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.367565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.368553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2058.370516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:20:51 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x5450, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x589000, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000003c0)={0x4, 0x7f, "87279d", 0x3, 0x1}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) fallocate(r1, 0x0, 0x10001, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000440)={{0x0, 0x84, 0x400, 0x8, 0xc1, 0xee2, 0x3, 0xb6, 0x4, 0x2, 0x8001, 0x9, 0xffffffffffffffff, 0xd181}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001e00)={{r5, 0x1f, 0x9, 0x919, 0x3, 0x57, 0x8, 0x0, 0x674, 0x7, 0x101, 0x0, 0x4, 0x6, 0x509}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x1, [{}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "83da7ce32c2bd4"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r7 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x40100, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000140)) 00:20:51 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) r13 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = epoll_create(0x1625) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 00:20:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2c, 0x112, 0x70bd2b, 0x25dfdbfe, {0xa}, [@typed={0xc, 0x32, 0x0, 0x0, @u64=0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24040000) syz_emit_ethernet(0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa1988e74afe9a625f7a9da74767515023d057bfc47e290d1dde0bea35d7b3ae95be0ed3c32067216b6bf965a9ca0f87722c8e2fe2bb16e53e296cc03308a132b65c92b60879725548abeb85b8e48a198f6500000000008be10565e8e5e5b0b704c094cc913fc5bbe7d6aeefcba38700b7df348a0ce85dbe08c2a585d087f691ab365544a710df6f03c64ce22d8cc0046cf543a4983f3aefdd46"], &(0x7f00000000c0)={0x0, 0x4, [0x97e, 0x83e, 0xaee, 0x95f]}) 00:20:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:20:51 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:20:51 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 76) 00:20:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @val={0x7, 0x3, 0x2, 0x7f, 0x6, 0xffff}, @ipv4=@dccp={{0x37, 0x4, 0x3, 0x2f, 0xf1, 0x68, 0x0, 0x3, 0x21, 0x0, @rand_addr=0x64010102, @multicast2, {[@generic={0x82, 0xd, "dd9766ea02c3538fba35cd"}, @timestamp_prespec={0x44, 0x2c, 0x34, 0x3, 0x3, [{@rand_addr=0x64010100, 0x1}, {@local, 0x8}, {@broadcast, 0x80000001}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}]}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0xf, "03e88c653d77ec8e93522eaf3b"}, {0x0, 0x5, "96c14f"}, {0x7, 0x4, "7f7d"}, {0x6, 0x11, "b2d462f53b9420c6663ba0ff628cf4"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x49, 0x3, 0x7, [{@private=0xa010100, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x9}, {@private=0xa010102, 0xfff}]}, @ssrr={0x89, 0x2b, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @local, @local, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x14, 0xe3, 0x3, 0x6, [{@remote, 0x7}, {@private=0xa010100, 0x7}]}]}}, {{0x7fff, 0x4e23, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, "f7a108", 0x0, "0682f9"}, "f381133c9a"}}}, 0xfb) [ 2074.356796] FAULT_INJECTION: forcing a failure. [ 2074.356796] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.358633] CPU: 1 PID: 24882 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2074.359670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2074.360860] Call Trace: [ 2074.361256] dump_stack+0x107/0x167 [ 2074.361793] should_fail.cold+0x5/0xa [ 2074.362356] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2074.363099] should_failslab+0x5/0x20 [ 2074.363648] kmem_cache_alloc_trace+0x55/0x320 [ 2074.364314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2074.365054] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2074.365772] __list_lru_init+0x44d/0x890 [ 2074.366432] alloc_super+0x8b8/0xa90 [ 2074.367087] ? test_bdev_super_fc+0x80/0x80 [ 2074.367839] sget+0x110/0x510 [ 2074.368383] ? __put_super.part.0+0x2a0/0x2a0 [ 2074.369172] mount_bdev+0xf8/0x400 [ 2074.369795] ? msdos_mount+0x40/0x40 [ 2074.370443] ? setup+0xd0/0xd0 [ 2074.371020] legacy_get_tree+0x105/0x220 [ 2074.371726] vfs_get_tree+0x8e/0x300 [ 2074.372371] path_mount+0x1429/0x2120 [ 2074.373040] ? strncpy_from_user+0x9e/0x470 [ 2074.373812] ? finish_automount+0xa90/0xa90 [ 2074.374585] ? getname_flags.part.0+0x1dd/0x4f0 [ 2074.375419] __x64_sys_mount+0x282/0x300 [ 2074.376145] ? copy_mnt_ns+0xa00/0xa00 [ 2074.376848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2074.377763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2074.378668] do_syscall_64+0x33/0x40 [ 2074.379333] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2074.380223] RIP: 0033:0x7f4b8d524b19 [ 2074.380867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2074.384015] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2074.385330] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2074.386603] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2074.387865] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.389089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.390314] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2074.395397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:51 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:51 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0081003f000800450000280000000000069078ac1e0001ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 00:20:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:20:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 77) 00:20:51 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x5451, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:20:51 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) r13 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = epoll_create(0x1625) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2074.648502] FAULT_INJECTION: forcing a failure. [ 2074.648502] name failslab, interval 1, probability 0, space 0, times 0 [ 2074.650203] CPU: 0 PID: 25100 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2074.651206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2074.652391] Call Trace: [ 2074.652783] dump_stack+0x107/0x167 [ 2074.653307] should_fail.cold+0x5/0xa [ 2074.653855] ? create_object.isra.0+0x3a/0xa20 [ 2074.654519] should_failslab+0x5/0x20 [ 2074.655063] kmem_cache_alloc+0x5b/0x310 [ 2074.655647] ? mark_held_locks+0x9e/0xe0 [ 2074.656231] create_object.isra.0+0x3a/0xa20 [ 2074.656857] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2074.657581] kmem_cache_alloc_trace+0x151/0x320 [ 2074.658249] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2074.658960] __list_lru_init+0x44d/0x890 [ 2074.659565] alloc_super+0x8b8/0xa90 [ 2074.660106] ? test_bdev_super_fc+0x80/0x80 [ 2074.660726] sget+0x110/0x510 [ 2074.661175] ? __put_super.part.0+0x2a0/0x2a0 [ 2074.661819] mount_bdev+0xf8/0x400 [ 2074.662333] ? msdos_mount+0x40/0x40 [ 2074.662870] ? setup+0xd0/0xd0 [ 2074.663337] legacy_get_tree+0x105/0x220 [ 2074.663915] vfs_get_tree+0x8e/0x300 [ 2074.664450] path_mount+0x1429/0x2120 [ 2074.664999] ? strncpy_from_user+0x9e/0x470 [ 2074.665630] ? finish_automount+0xa90/0xa90 [ 2074.666256] ? getname_flags.part.0+0x1dd/0x4f0 [ 2074.666659] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2074.666946] __x64_sys_mount+0x282/0x300 [ 2074.666964] ? copy_mnt_ns+0xa00/0xa00 [ 2074.666992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2074.670082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2074.670807] do_syscall_64+0x33/0x40 [ 2074.671332] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2074.672047] RIP: 0033:0x7f4b8d524b19 [ 2074.672569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2074.675122] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2074.676213] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2074.677204] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2074.678199] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2074.679203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2074.680204] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:20:51 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2074.869873] print_req_error: 23 callbacks suppressed [ 2074.870654] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2074.874954] FAT-fs (loop6): unable to read boot sector [ 2075.145071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.145966] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.147614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.148434] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.149998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.150792] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.152343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.153151] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.154722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.155510] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.157068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.157829] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.159403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.160193] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.162259] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.163815] buffer_io_error: 6 callbacks suppressed [ 2075.163827] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2075.165651] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2075.167185] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2075.168261] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2075.169382] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2075.170477] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2075.171611] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2075.172736] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2075.174611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.181943] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2075.258422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.259379] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2075.259435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.261003] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2075.261070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.262609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.263499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.264403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.265317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2075.266209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:21:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 78) 00:21:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1e0001ac1414bb00000000bee260b03217cdcd0000804651f26e338df5af9a821dd63885520c9c2412d1eb0e16944a216a99e18a8a8ed5d51ef0bdf305ad7fedc23f5a6a41a501af39915e92d40ccb5c30982ce4324d91e8e81dcc8e480c496692e3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 00:21:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_create(0x1625) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:08 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) [ 2091.645355] FAULT_INJECTION: forcing a failure. [ 2091.645355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2091.646987] CPU: 0 PID: 25221 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2091.647899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.649013] Call Trace: [ 2091.649381] dump_stack+0x107/0x167 [ 2091.649873] should_fail.cold+0x5/0xa [ 2091.650285] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.650409] __alloc_pages_nodemask+0x182/0x600 [ 2091.652304] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2091.653137] alloc_pages_current+0x187/0x280 [ 2091.653724] allocate_slab+0x26f/0x380 [ 2091.654246] ___slab_alloc+0x470/0x700 [ 2091.654776] ? create_object.isra.0+0x3a/0xa20 [ 2091.655387] ? fs_reclaim_acquire+0xa5/0x100 [ 2091.655983] ? create_object.isra.0+0x3a/0xa20 [ 2091.656589] ? kmem_cache_alloc+0x301/0x310 [ 2091.657156] kmem_cache_alloc+0x301/0x310 [ 2091.657713] create_object.isra.0+0x3a/0xa20 [ 2091.658295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2091.658980] kmem_cache_alloc_trace+0x151/0x320 [ 2091.659602] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2091.660255] __list_lru_init+0x44d/0x890 [ 2091.660801] alloc_super+0x8b8/0xa90 [ 2091.661295] ? test_bdev_super_fc+0x80/0x80 [ 2091.661870] sget+0x110/0x510 [ 2091.662290] ? __put_super.part.0+0x2a0/0x2a0 [ 2091.662895] mount_bdev+0xf8/0x400 [ 2091.663366] ? msdos_mount+0x40/0x40 [ 2091.663859] ? setup+0xd0/0xd0 [ 2091.664290] legacy_get_tree+0x105/0x220 [ 2091.664821] vfs_get_tree+0x8e/0x300 [ 2091.665309] path_mount+0x1429/0x2120 [ 2091.665817] ? strncpy_from_user+0x9e/0x470 [ 2091.666384] ? finish_automount+0xa90/0xa90 [ 2091.666962] ? getname_flags.part.0+0x1dd/0x4f0 [ 2091.667581] __x64_sys_mount+0x282/0x300 [ 2091.668108] ? copy_mnt_ns+0xa00/0xa00 [ 2091.668624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2091.669306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2091.669982] do_syscall_64+0x33/0x40 [ 2091.670468] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2091.671146] RIP: 0033:0x7f4b8d524b19 [ 2091.671634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2091.674048] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2091.675076] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2091.676007] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2091.676940] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.677881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2091.678810] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:21:08 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:08 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x9100, 0x4, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@llc={0x4, {@llc={0xaa, 0x0, "cf27", "d5c0"}}}}}, &(0x7f0000000040)={0x1, 0x4, [0x29e, 0xbfd, 0x83e, 0xd8c]}) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @local, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0xf, 0x3, 0x0, 0x0, "cc608ca69612c7b7c39636553ccd6d74d1c520e941419fb3297bfb69a332f6f8c54aedb6cd304ecb1dc3bac1b7f3b6550a058c4c47a748a83565b2143b262703"}}}}, &(0x7f0000000100)={0x1, 0x2, [0xaf1, 0xec8, 0x686, 0x4f6]}) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) [ 2091.790575] print_req_error: 23 callbacks suppressed [ 2091.790597] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 00:21:08 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 2091.797389] FAT-fs (loop6): unable to read boot sector 00:21:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0x6, 0x100, 0xd4, 0x6146, 0x0, 0x1, {0x3}}, 0x70000) close(r2) write$tun(r2, &(0x7f0000000000)={@void, @val={0x0, 0x3, 0x0, 0xfff8, 0x400, 0x6}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="578380dc3a17", @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0x6, 0x6, "95", "c88facc0733e95068a8f45217199e452338be6138f36ae6a8cd1416ab54d3e14a97a60e69587a8756abaed1c61e79e79e67278d97586334cc4653cc9bcbf82ad022edd4d55d0720e6b9bb7e8a05258d0d79eae"}}}}}}, 0x72) 00:21:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 79) 00:21:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 2091.962910] FAULT_INJECTION: forcing a failure. [ 2091.962910] name failslab, interval 1, probability 0, space 0, times 0 [ 2091.964231] CPU: 0 PID: 25450 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2091.964980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2091.965868] Call Trace: [ 2091.966163] dump_stack+0x107/0x167 [ 2091.966559] should_fail.cold+0x5/0xa [ 2091.966985] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2091.967536] should_failslab+0x5/0x20 [ 2091.967955] kmem_cache_alloc_trace+0x55/0x320 [ 2091.968452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2091.969005] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2091.969547] __list_lru_init+0x44d/0x890 [ 2091.969993] alloc_super+0x8b8/0xa90 [ 2091.970400] ? test_bdev_super_fc+0x80/0x80 [ 2091.970877] sget+0x110/0x510 [ 2091.971218] ? __put_super.part.0+0x2a0/0x2a0 [ 2091.971705] mount_bdev+0xf8/0x400 [ 2091.972103] ? msdos_mount+0x40/0x40 [ 2091.972515] ? setup+0xd0/0xd0 [ 2091.972865] legacy_get_tree+0x105/0x220 [ 2091.973320] vfs_get_tree+0x8e/0x300 [ 2091.973724] path_mount+0x1429/0x2120 [ 2091.974165] ? strncpy_from_user+0x9e/0x470 [ 2091.974634] ? finish_automount+0xa90/0xa90 [ 2091.975120] ? getname_flags.part.0+0x1dd/0x4f0 [ 2091.975632] __x64_sys_mount+0x282/0x300 [ 2091.976071] ? copy_mnt_ns+0xa00/0xa00 [ 2091.976514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2091.977079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2091.977644] do_syscall_64+0x33/0x40 [ 2091.978045] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2091.978594] RIP: 0033:0x7f4b8d524b19 [ 2091.979003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2091.980948] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2091.981768] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2091.982538] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2091.983311] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2091.984079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2091.984849] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2092.022340] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2092.333990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.334539] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.335560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.336060] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.337033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.337503] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.338481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.338981] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.339949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.340433] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.341404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.341908] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.342931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.343408] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.344370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.344841] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.345817] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2092.346772] buffer_io_error: 6 callbacks suppressed [ 2092.346779] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2092.347909] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2092.348581] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2092.349265] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2092.349951] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2092.350625] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2092.351333] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2092.352030] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2092.386629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.387171] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2092.390148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.390649] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2092.391413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.392007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.392574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.393155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.393722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2092.394319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:21:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)=@phonet={0x23, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000300)="050300000013890000004c435ce0f87181858ced753d49d8ecb2a18956fd475167c74940c9f170abcef15a2646cc6bc18bc7ea42b0a819b9aa6d6e0a40de161036b064c609c453dcc0193484715e01a3cf7350060000007a6365dbffdfe98717e7ebe77c36cec6bce2ec8f103a63900770d3e65bceb99a05540bc374fa63951f3f5e61d7b8f42a0c424f365c06a2c48ceeb861cac6", 0x95}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000040)="48ececa623f93c92be9a6e93257ab0babd1fb22f46dc720ab5c759f3ec68c21c93a0e76d4460931dd01989fa0bf67e524b3fd8db26fc002ccac6d49e6d47d061bf15ce7e03e022448175b645e83f547424c2cd5fbd6d2274564307e3f6e390bcf1e7", 0x62}, {&(0x7f0000000200)="d2987a03b1685fda3f8459b2c89bd84ac0e69b7a19e811b847a389072e56aab1f92864b608e35d83f0da021a229db0ebbe1775e1cd771158d931f966e7d60b8d5acc8d876c5d3033a102fb1a0dfe47199ee72b5ed48736c2f25f09da727f5d8f0266a4d144d84ffbd1b987345650f41cd26308bf861fea7053054f969f24cfaa7fc0994b593865bd11ee1c5f9ea95858ba63493642ce1814f9ee5be919f76a72f6fce9290e89308a3e1af6ba913e8e9a576fdb60106ab30f66", 0xb9}, {&(0x7f00000015c0)="f7518816f466911c7ae0dfdf044b8f29d33306792bb3aa89869c1835ba480272ed56d530fa2f2f321027249c0ce2ebd70c11fee0967df6a88539575d23b57cab360c01f28978e68e54161e0d53ef412f31e0b29e0ad55ed0d3b9573e5f6ed65466c666eca444d9b8337cb634b523c6d2b7d9975f1a023bc1caa4606da2d69ba7eb017a952256e14a8bdb79259f8b5245f0ce8880305c7af16044d0d392ad0473e3540be7a1f96e642722b54fddd5ebaa00b06679c332aba3007693467fee6fe604df51daa1f7b359297bd6fb77e2ba580614109aed13b116cd6b390df4e3faa31fb582e28d6decf38ea82b31082516427bdf0e91856871e148a7496339ef23b961e95c3345fc409f9f374d23dd661675dcf93b5f9092b9bf4e13106d79bf8062705fb89a673f0f6a90b09690b43b57b79e1de1ba3ed5354a6f2bd8c3b334f71c293c9017185ed10edd729b5e6652dd65932daee7470287cf7082e1169f2412c0334a4c9971b02d3127a5785acec44ebcb2b9152d41ec63edd10f9f8cd2e9fd0416e3dba035dd78825e83b0770f8c9fc116fa5e754bbfe7b8963d27a62e4b9993eee5d3dc34ffac25516fd15cb65b7c39f3e9885b18aa5f2c5abf1e1058eb5fcd0fbc9fcb677cff62cef95a4111ed2f500cfa8ecf130e90714ad7462285a51b9931f66aac", 0x1e4}], 0x5}, 0x0) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bind$packet(r3, &(0x7f00000014c0)={0x11, 0xf8, r4, 0x1, 0x6, 0x6, @broadcast}, 0x14) 00:21:29 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:21:29 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40049409, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:29 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:29 executing program 1: syz_emit_ethernet(0x16a, &(0x7f0000000600)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x1c, 0x4, 0x2, 0x14, 0x15c, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast2, @private=0xa010101, {[@end, @timestamp={0x44, 0x14, 0xa3, 0x0, 0x4, [0x7f, 0x40000000, 0xfff, 0x3ff]}, @generic={0x44, 0x2}, @rr={0x7, 0x23, 0xb9, [@broadcast, @broadcast, @empty, @private=0xa010102, @broadcast, @private=0xa010102, @private=0xa010102, @remote]}, @lsrr={0x83, 0x1f, 0x7c, [@loopback, @empty, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}, @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x4e23, 0x4e21, 0x1, 0x2, 0x0, 0x0, 0x1}, [{0x7, 0x6, 0x6, 0xffff8001, 0x0, 0x8, 0xa, 0x100}, {0x2, 0x7, 0x40, 0xffff, 0x3ff, 0x556, 0x8, 0x6}, {0x9, 0x80000001, 0x40, 0x3, 0x100, 0x8, 0x3, 0x6}, {0x400, 0x2, 0x1a51, 0x7, 0x56935a0, 0x7, 0x2, 0x3}, {0x9, 0xff, 0x8, 0x3, 0x9, 0x6, 0x2, 0x3}, {0x0, 0x16, 0x3, 0x6a562915, 0x6, 0x3, 0xf, 0x6a}, {0x3ff, 0x1, 0x9, 0xffffff7f, 0x401, 0x9, 0x3, 0x7}]}}}}}, 0x0) syz_emit_ethernet(0xe3, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0xaa, "c4f9", "979ae5", 0x88f7, "d63eec9ee62da51ce030fb6f7fd6950f24aff22316543e22d0c65dfae0e4c332dcbf78eb51989938ddd756f713cd166f0433b5728a70b4b3754a0e77b92c64a18f10df93d59126ddab2ec386254cfac51976b8f7d83700bafa402b00b36462aa31caa31a63846ea187d5ab5b2cef7ed068860a48383b66babe492ed992009ab5a8f873fb8f274ce49c004c782ebbf87075be9d2a6109108c2af7303aee08ca4b371d52f057ab9cce8afe888f90bd977db6421da1298765a7a3093ad46eeb6d383a1b37d1dd71c69d"}}}}}, &(0x7f0000000400)={0x0, 0x3, [0x11, 0x598, 0x9d1, 0x106]}) write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x3, 0x80, 0x1, 0x6d, 0x100, 0x42}, @llc={@snap={0xaa, 0xab, "b5", "230f78", 0x11, "ff1f2c118e65b6a2da30608bfa79dfc41d9392cb1c854da8c574a1cf0f2369dd52eadc908251f63b097053c58a1792a2a7de"}}}, 0xffffff94) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x25e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 00:21:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 80) [ 2112.199632] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2112.217977] FAULT_INJECTION: forcing a failure. [ 2112.217977] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.219987] CPU: 0 PID: 25775 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2112.221077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.222366] Call Trace: [ 2112.222796] dump_stack+0x107/0x167 [ 2112.223400] should_fail.cold+0x5/0xa [ 2112.224015] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2112.224811] should_failslab+0x5/0x20 [ 2112.225420] kmem_cache_alloc_trace+0x55/0x320 [ 2112.226152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2112.226965] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2112.227785] __list_lru_init+0x44d/0x890 [ 2112.228458] alloc_super+0x8b8/0xa90 [ 2112.229074] ? test_bdev_super_fc+0x80/0x80 [ 2112.229774] sget+0x110/0x510 [ 2112.230303] ? __put_super.part.0+0x2a0/0x2a0 [ 2112.231066] mount_bdev+0xf8/0x400 [ 2112.231655] ? msdos_mount+0x40/0x40 [ 2112.232269] ? setup+0xd0/0xd0 [ 2112.232784] legacy_get_tree+0x105/0x220 [ 2112.233466] vfs_get_tree+0x8e/0x300 [ 2112.234073] path_mount+0x1429/0x2120 [ 2112.234709] ? strncpy_from_user+0x9e/0x470 [ 2112.235429] ? finish_automount+0xa90/0xa90 [ 2112.236154] ? getname_flags.part.0+0x1dd/0x4f0 [ 2112.236924] __x64_sys_mount+0x282/0x300 [ 2112.237601] ? copy_mnt_ns+0xa00/0xa00 [ 2112.238252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2112.239119] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2112.239978] do_syscall_64+0x33/0x40 [ 2112.240599] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2112.241457] RIP: 0033:0x7f4b8d524b19 [ 2112.242054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.245090] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2112.246344] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2112.247522] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2112.248691] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.249870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2112.251053] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:21:29 executing program 1: accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:21:29 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r11}}, 0xfffffff7) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) [ 2112.435295] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2112.699655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.700639] print_req_error: 23 callbacks suppressed [ 2112.700658] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.703278] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.704982] buffer_io_error: 6 callbacks suppressed [ 2112.704994] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2112.731075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.732002] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.733943] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.735668] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2112.741057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.741985] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.743733] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.745446] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2112.747412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.748336] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.750092] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.751817] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2112.753693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.754642] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.756394] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2112.758108] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2112.760096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.761158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.762693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2112.763666] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2112.764935] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2112.766150] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:21:48 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000080)={@multicast, @random="8f8bac99839e", @void, {@mpls_uc={0x8847, {[{0xc3, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "21b7", "f51631", 0x60, "4bef8de305c67408ff160546b29931992edd79558e618343175937431ad7030ba595aaa5b6da9f307220d9d52f165a38b9dadd118f7433197d7e787907f47c17afa9ad5a631a877f048011560019fe012714215a54"}}}}}}, 0x0) 00:21:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 81) 00:21:48 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:21:48 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r7}}, 0xfffffff7) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:48 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2131.603594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2131.613230] FAULT_INJECTION: forcing a failure. [ 2131.613230] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.615498] CPU: 1 PID: 26103 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2131.616830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2131.618388] Call Trace: [ 2131.618909] dump_stack+0x107/0x167 [ 2131.619626] should_fail.cold+0x5/0xa [ 2131.620373] ? create_object.isra.0+0x3a/0xa20 [ 2131.621251] should_failslab+0x5/0x20 [ 2131.621976] kmem_cache_alloc+0x5b/0x310 [ 2131.622750] ? mark_held_locks+0x9e/0xe0 [ 2131.623553] create_object.isra.0+0x3a/0xa20 [ 2131.624390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2131.625366] kmem_cache_alloc_trace+0x151/0x320 [ 2131.626267] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2131.627239] __list_lru_init+0x44d/0x890 [ 2131.628047] alloc_super+0x8b8/0xa90 [ 2131.628764] ? test_bdev_super_fc+0x80/0x80 [ 2131.629595] sget+0x110/0x510 [ 2131.630209] ? __put_super.part.0+0x2a0/0x2a0 [ 2131.631066] mount_bdev+0xf8/0x400 [ 2131.631775] ? msdos_mount+0x40/0x40 [ 2131.632489] ? setup+0xd0/0xd0 [ 2131.633115] legacy_get_tree+0x105/0x220 [ 2131.633901] vfs_get_tree+0x8e/0x300 [ 2131.634608] path_mount+0x1429/0x2120 [ 2131.635379] ? strncpy_from_user+0x9e/0x470 [ 2131.636209] ? finish_automount+0xa90/0xa90 [ 2131.637030] ? getname_flags.part.0+0x1dd/0x4f0 [ 2131.637939] __x64_sys_mount+0x282/0x300 [ 2131.638708] ? copy_mnt_ns+0xa00/0xa00 [ 2131.639473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2131.640483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2131.641462] do_syscall_64+0x33/0x40 [ 2131.642171] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2131.643171] RIP: 0033:0x7f4b8d524b19 [ 2131.643891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2131.646737] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2131.647925] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2131.649033] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2131.650137] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2131.651250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2131.652347] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:21:48 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) 00:21:49 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x9200}, @void, @arp=@generic={0x325, 0x11, 0x6, 0x2, 0x3, @remote, "0d0f", @local, "62a2ae"}}, 0x1d) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x8848}, @val={0x0, 0x80, 0x7, 0x2, 0x5, 0x7fff}, @arp=@generic={0x110, 0x8884, 0x6, 0xb, 0x4, @multicast, "93f2ec2b27a35323661dff", @remote, "91fbc7537f5b2f"}}, 0x34) 00:21:49 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 2131.829108] print_req_error: 6 callbacks suppressed [ 2131.829122] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2131.830558] FAT-fs (loop6): unable to read boot sector 00:21:49 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x127b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:49 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40086602, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:21:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2131.946691] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2131.947396] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2131.948042] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2131.948692] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2131.949344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2131.949996] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2131.973447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2132.319099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.320002] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.321595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.322400] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.323986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.324774] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.326382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.327215] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.328777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.329604] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.331206] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.332735] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2132.333890] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.335432] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2132.336556] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.338094] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2132.339209] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2132.340729] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2132.341887] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2132.343140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.344072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.344978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.345807] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2132.346939] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2132.348081] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2132.418904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.419787] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2132.422932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.423760] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2132.425654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.427245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.428218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.429705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.431661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2132.432660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:22:07 executing program 1: syz_emit_ethernet(0x12d, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x1d, 0x4, 0x1, 0x2, 0x11f, 0x67, 0x0, 0x0, 0x6, 0x0, @broadcast, @remote, {[@noop, @cipso={0x86, 0x31, 0x3, [{0x6, 0xc, "1969e6a3ca5443cb2852"}, {0x3, 0x10, "4f1d729a006ce351104d8058d20f"}, {0x5, 0xf, "5805cd2e02d1489ebe37a5a426"}]}, @end, @cipso={0x86, 0x26, 0x2, [{0x7, 0x8, "e3288fa023df"}, {0x7, 0xb, "de506e0fe23ff7d1e3"}, {0x0, 0xa, "abdc555bc0a08e8f"}, {0x7, 0x3, "f9"}]}, @ra={0x94, 0x4}]}}, "da83e1d6ee67810a4100e747e62b68d926b432e030ac174ba5dfa9255be9bf364b55fa79bf32fb3e85f54671ec96307aeee1957c0f85b320dbfe3ff5eb308795a8799c4be96c0d7811c4f8f1f8a7d9cf948a3409e8ce761b628154c4d94b10b5d93d961c96ae8cee4df5c5b54ff4b3daa3ab408fcdadbbd6395fa9e5476bc246656347ec3ec1c9393d979a07e95ee102a93766f67d0c48bcc20607bd3f65d0fb2b61bd66d9037b11f05b18"}}}}, 0x0) 00:22:07 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, 0x0) 00:22:07 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40087602, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:07 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r12}}, 0xfffffff7) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0x6, 0x0, 0x5, 0x5, 0x0, {0x0, r6}}, 0x7ff) close_range(r0, 0xffffffffffffffff, 0x0) [ 2150.642521] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2150.644156] FAULT_INJECTION: forcing a failure. [ 2150.644156] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.644177] CPU: 0 PID: 26369 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2150.644196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.647776] Call Trace: [ 2150.648109] dump_stack+0x107/0x167 [ 2150.648554] should_fail.cold+0x5/0xa [ 2150.649030] ? create_object.isra.0+0x3a/0xa20 [ 2150.649596] should_failslab+0x5/0x20 [ 2150.650072] kmem_cache_alloc+0x5b/0x310 [ 2150.650572] ? mark_held_locks+0x9e/0xe0 [ 2150.651078] create_object.isra.0+0x3a/0xa20 [ 2150.651644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2150.652288] kmem_cache_alloc_trace+0x151/0x320 [ 2150.652888] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2150.653499] __list_lru_init+0x44d/0x890 [ 2150.654009] alloc_super+0x8b8/0xa90 [ 2150.654463] ? test_bdev_super_fc+0x80/0x80 [ 2150.655002] sget+0x110/0x510 [ 2150.655404] ? __put_super.part.0+0x2a0/0x2a0 [ 2150.655974] mount_bdev+0xf8/0x400 [ 2150.656420] ? msdos_mount+0x40/0x40 [ 2150.656881] ? setup+0xd0/0xd0 [ 2150.657289] legacy_get_tree+0x105/0x220 [ 2150.657790] vfs_get_tree+0x8e/0x300 [ 2150.658255] path_mount+0x1429/0x2120 [ 2150.658726] ? strncpy_from_user+0x9e/0x470 [ 2150.659267] ? finish_automount+0xa90/0xa90 [ 2150.659812] ? getname_flags.part.0+0x1dd/0x4f0 [ 2150.660404] __x64_sys_mount+0x282/0x300 [ 2150.660896] ? copy_mnt_ns+0xa00/0xa00 [ 2150.661374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.662033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.662660] do_syscall_64+0x33/0x40 [ 2150.663124] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2150.663782] RIP: 0033:0x7f4b8d524b19 [ 2150.664247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.666497] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2150.667461] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2150.668356] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2150.669235] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.670120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.671013] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2150.720703] print_req_error: 23 callbacks suppressed [ 2150.720720] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2150.725083] FAT-fs (loop6): unable to read boot sector 00:22:07 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, 0x0) 00:22:07 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 84) 00:22:08 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.926485] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2150.927606] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2150.928652] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2150.929692] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.930736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.931796] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2150.954393] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2151.272446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.273347] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.274988] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.276547] buffer_io_error: 6 callbacks suppressed [ 2151.276559] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2151.287021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.287824] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.289416] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.290952] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2151.307197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.308052] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.310285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.311115] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.313345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.314175] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.315743] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.317276] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2151.318442] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2151.319997] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2151.321140] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2151.322683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.323588] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2151.323642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.325183] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2151.325247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2151.326704] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:22:23 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, 0x0) 00:22:23 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r11}}, 0xfffffff7) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:23 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:22:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000001140)) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, r3, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f}) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000080)=""/10) semop(r2, &(0x7f0000000280)=[{0x1, 0x8001, 0x1800}, {0x4, 0x3, 0x1000}, {0x2, 0xca5, 0x800}, {0x1, 0x5, 0x800}, {0x1, 0x8000, 0x1000}, {0x0, 0xad27, 0x1000}, {0x3, 0x5, 0x800}, {0x3, 0x4340, 0x1000}, {0x4, 0xd474}], 0x9) 00:22:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 85) 00:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2166.397645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2166.408064] FAULT_INJECTION: forcing a failure. [ 2166.408064] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.409792] CPU: 1 PID: 26506 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2166.410801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.411998] Call Trace: [ 2166.412392] dump_stack+0x107/0x167 [ 2166.412927] should_fail.cold+0x5/0xa [ 2166.413508] ? create_object.isra.0+0x3a/0xa20 [ 2166.414199] should_failslab+0x5/0x20 [ 2166.414757] kmem_cache_alloc+0x5b/0x310 [ 2166.415354] ? mark_held_locks+0x9e/0xe0 [ 2166.415963] create_object.isra.0+0x3a/0xa20 [ 2166.416603] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2166.417344] kmem_cache_alloc_trace+0x151/0x320 [ 2166.418031] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2166.418749] __list_lru_init+0x44d/0x890 [ 2166.419348] alloc_super+0x8b8/0xa90 [ 2166.419904] ? test_bdev_super_fc+0x80/0x80 [ 2166.420531] sget+0x110/0x510 [ 2166.420992] ? __put_super.part.0+0x2a0/0x2a0 [ 2166.421651] mount_bdev+0xf8/0x400 [ 2166.422175] ? msdos_mount+0x40/0x40 [ 2166.422721] ? setup+0xd0/0xd0 [ 2166.423194] legacy_get_tree+0x105/0x220 [ 2166.423805] vfs_get_tree+0x8e/0x300 [ 2166.424344] path_mount+0x1429/0x2120 [ 2166.424906] ? strncpy_from_user+0x9e/0x470 [ 2166.425535] ? finish_automount+0xa90/0xa90 [ 2166.426163] ? getname_flags.part.0+0x1dd/0x4f0 [ 2166.426861] __x64_sys_mount+0x282/0x300 [ 2166.427452] ? copy_mnt_ns+0xa00/0xa00 [ 2166.428034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2166.428792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.429539] do_syscall_64+0x33/0x40 [ 2166.430083] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2166.430822] RIP: 0033:0x7f4b8d524b19 [ 2166.431364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.434006] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2166.435107] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2166.436152] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2166.437187] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.438214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2166.439243] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:23 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:23 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r7}}, 0xfffffff7) close_range(r0, 0xffffffffffffffff, 0x0) [ 2166.549379] print_req_error: 7 callbacks suppressed [ 2166.549399] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2166.557219] FAT-fs (loop6): unable to read boot sector 00:22:23 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:22:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 86) 00:22:23 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:23 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 00:22:23 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40101286, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.761182] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2166.762388] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2166.763511] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2166.764636] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.765760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2166.766886] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:22:23 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) [ 2166.803632] FAULT_INJECTION: forcing a failure. [ 2166.803632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2166.805531] CPU: 0 PID: 26726 Comm: syz-executor.5 Not tainted 5.10.217 #1 [ 2166.806630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.807947] Call Trace: [ 2166.808375] dump_stack+0x107/0x167 [ 2166.808965] should_fail.cold+0x5/0xa [ 2166.809586] _copy_to_user+0x2e/0x180 [ 2166.810207] simple_read_from_buffer+0xcc/0x160 [ 2166.810961] proc_fail_nth_read+0x198/0x230 [ 2166.811661] ? proc_sessionid_read+0x230/0x230 [ 2166.812389] ? security_file_permission+0x24e/0x570 [ 2166.813192] ? perf_trace_initcall_start+0xf1/0x380 [ 2166.814001] ? proc_sessionid_read+0x230/0x230 [ 2166.814733] vfs_read+0x228/0x580 [ 2166.815285] ksys_read+0x12d/0x260 [ 2166.815866] ? vfs_write+0xa70/0xa70 [ 2166.816469] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2166.817305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.818129] do_syscall_64+0x33/0x40 [ 2166.818727] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2166.819558] RIP: 0033:0x7f5c85c6269c [ 2166.820134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2166.823035] RSP: 002b:00007f5c83225170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2166.824252] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c85c6269c [ 2166.825380] RDX: 000000000000000f RSI: 00007f5c832251e0 RDI: 0000000000000004 [ 2166.826514] RBP: 00007f5c832251d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.827653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.828782] R13: 00007ffe6890415f R14: 00007f5c83225300 R15: 0000000000022000 00:22:24 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 87) [ 2166.949121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:24 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:24 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40101288, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.062451] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2167.063687] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2167.064843] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2167.065976] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2167.067127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2167.068254] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:22:24 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2167.155854] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.160257] FAT-fs (loop6): unable to read boot sector [ 2167.553354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.553875] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.554728] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.555609] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2167.563386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.563824] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.564688] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.565530] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2167.570955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.571388] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.572250] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.573093] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2167.575940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.576371] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.577237] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2167.578082] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2167.578766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.579245] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2167.579957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.580412] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2167.581105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.581557] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2167.582254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.582713] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2167.616893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.617439] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2167.618189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.618644] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2167.619401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.620950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.621477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.622032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.622543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.623076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.651481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.654946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.655477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.656031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.656547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.657086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.657606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2167.658147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:22:41 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x401070c9, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:41 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:22:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 88) 00:22:41 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) preadv2(r2, &(0x7f0000000800)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/141, 0x8d}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/146, 0x92}], 0xa, 0x100, 0x5, 0x4) io_uring_enter(r0, 0x68be, 0x1859, 0x2, &(0x7f0000000040)={[0x3]}, 0x8) fallocate(r2, 0x0, 0x7, 0x800) 00:22:41 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:41 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2184.117326] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2184.118605] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2184.119781] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2184.120963] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2184.122148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2184.123334] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:22:41 executing program 1: syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x204240, 0x0) r6 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r8 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0xfffffffb) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r12, 0x0, r13, 0x2, 0x0, 0x1}, 0x1) close(r2) io_uring_enter(r5, 0x2038, 0xd28b, 0x2, &(0x7f00000001c0)={[0x90]}, 0x8) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:41 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:41 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2184.746146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.747361] print_req_error: 40 callbacks suppressed [ 2184.747381] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.751132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.752345] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.754495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.755610] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.757963] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.759949] buffer_io_error: 14 callbacks suppressed [ 2184.759965] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2184.762707] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.764896] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2184.766384] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.768948] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2184.772107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.773280] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.775662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.776926] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.779047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.780281] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.782654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.783628] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.786064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2184.787664] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2184.789003] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2184.790308] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2184.791608] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2184.792904] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:22:57 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 89) 00:22:57 executing program 1: syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(r2, 0x5743, 0x81bd, 0x1, &(0x7f0000000100)={[0x1000000000]}, 0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) close(r2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x20, 0x8, 0x6, 0x0, 0x1, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x63, 0x6}, 0x8000, 0x928, 0x1, 0x5, 0x3, 0x0, 0x1f, 0x0, 0x2b9c4e51, 0x0, 0x10001}, 0x0, 0x6, r2, 0x3) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) dup2(r3, 0xffffffffffffffff) 00:22:57 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000440)={0x0, "35309f7cdc133a5cfd222b8066bc3d64"}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001440)={{r0}, 0x0, 0x1, @unused=[0x7, 0x1ff, 0x9, 0x40], @devid=r2}) 00:22:57 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2200.179108] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:57 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:22:57 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:22:57 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x401070ca, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:22:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2200.225321] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2200.226542] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2200.227671] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2200.228814] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2200.229936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2200.231068] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:22:57 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2200.518967] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2200.520195] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2200.521335] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2200.522475] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2200.523616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2200.524761] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2200.535266] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.536565] FAT-fs (loop6): unable to read boot sector [ 2200.908987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.909498] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.910408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.910867] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.911727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.912186] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.913065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.913490] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.914367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.914795] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.915670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.916125] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.916998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.917423] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.918300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2200.918729] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2200.919581] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2200.920222] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2200.920842] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2200.921446] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2200.922061] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2200.922665] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2200.923286] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2200.923909] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:23:13 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x401070cd, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:23:13 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:23:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 91) 00:23:13 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) write$tun(r2, &(0x7f00000003c0)={@val={0x0, 0x11}, @val={0x2, 0x4, 0x1000, 0x6, 0x1, 0x8001}, @ipv6=@udp={0x8, 0x6, "92fc48", 0xb2, 0x11, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, {[@routing={0x89, 0x6, 0x2, 0x81, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x6, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x1f}, @ra={0x5, 0x2, 0x4800}]}], {0x4e22, 0x4e20, 0x62, 0x0, @opaque="3881e95d2dbeae24914b402139fc836171f09f5343daabfe1fc843db37cb46a47f5daa153e9ffb9b60f2f66ab6fd79c365befb49475152ec6cae5ea473cb1bcefb65485c65013a1b51cef084b0036b6f6defc90052acccd8dd78"}}}}, 0xe8) 00:23:13 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1e0001ac1414bb00000000d840909b96b91e6fa1af05a30a88efec410ae71707c23eccdfa6757bbfba6b8de90e64715c0e8362f2419f77fb6fa19b80b09f3662ef6ef6ccc3f9f66e5337385f34ff6074c9a549fbb8e54728a3d15564e419392a73c203c496ef85820ac533b8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x200) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 2216.646164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2216.654567] FAULT_INJECTION: forcing a failure. [ 2216.654567] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.655776] CPU: 0 PID: 27351 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2216.656524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.657431] Call Trace: [ 2216.657724] dump_stack+0x107/0x167 [ 2216.658123] should_fail.cold+0x5/0xa [ 2216.658536] ? create_object.isra.0+0x3a/0xa20 [ 2216.659030] should_failslab+0x5/0x20 [ 2216.659443] kmem_cache_alloc+0x5b/0x310 [ 2216.659885] ? mark_held_locks+0x9e/0xe0 [ 2216.660331] create_object.isra.0+0x3a/0xa20 [ 2216.660806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2216.661360] kmem_cache_alloc_trace+0x151/0x320 [ 2216.661872] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2216.662408] __list_lru_init+0x44d/0x890 [ 2216.662849] alloc_super+0x8b8/0xa90 [ 2216.663249] ? test_bdev_super_fc+0x80/0x80 [ 2216.663708] sget+0x110/0x510 [ 2216.664045] ? __put_super.part.0+0x2a0/0x2a0 [ 2216.664535] mount_bdev+0xf8/0x400 [ 2216.664919] ? msdos_mount+0x40/0x40 [ 2216.665318] ? setup+0xd0/0xd0 [ 2216.665668] legacy_get_tree+0x105/0x220 [ 2216.666118] vfs_get_tree+0x8e/0x300 [ 2216.666518] path_mount+0x1429/0x2120 [ 2216.666934] ? strncpy_from_user+0x9e/0x470 [ 2216.667396] ? finish_automount+0xa90/0xa90 [ 2216.667860] ? getname_flags.part.0+0x1dd/0x4f0 [ 2216.668375] __x64_sys_mount+0x282/0x300 [ 2216.668811] ? copy_mnt_ns+0xa00/0xa00 [ 2216.669236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2216.669794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2216.670349] do_syscall_64+0x33/0x40 [ 2216.670747] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2216.671296] RIP: 0033:0x7f4b8d524b19 [ 2216.671693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.673661] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2216.674471] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2216.675229] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2216.675996] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.676751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2216.677523] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:23:13 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.412955] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2235.420555] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2235.421587] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2235.422617] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.423648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.424693] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:23:32 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1e0001ac1414bb000000007a851f92e0558d3a42e789c623c1cdb292689673660b17f02f51ced5", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x24044050) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x9300}, @val={0x3, 0x80, 0x0, 0x2773, 0x7ff, 0x50d}, @ipv6=@tipc_packet={0x3, 0x6, "5db717", 0xf0, 0x6, 0x0, @private2, @remote, {[@srh={0x23, 0xa, 0x4, 0x5, 0x5, 0x0, 0x1ff, [@remote, @mcast1, @loopback, @mcast2, @empty]}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7771, 0x0, 0x1, 0x2, 0x8000, 0x3, 0x4e24, 0x4e24, 0x2, 0x4, 0x0, 0x0, 0x1}, [{0x0, 0xfffffff7, 0x3, 0x8e8, 0x1f, 0x3, 0x4, 0x10001}, {0x3, 0x5, 0x8000, 0x1, 0x977, 0x268e, 0x0, 0x4}, {0x8, 0x9, 0x766, 0x9b, 0x1, 0x8, 0x4, 0xa6b}, {0x2, 0x7, 0x4, 0x200, 0x8e, 0x2507, 0x3, 0x735}]}}}}, 0x126) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x800}, @val={0x3, 0x3, 0x1, 0x2, 0x32d1, 0x6}, @llc={@llc={0x7e, 0x4e, 'ZF', "6c38e63eee0fe1af8fb47cb3bb783d157ad26ae5c6c8f6ca5abe31e60196a2eba59582a38042"}}}, 0x38) syz_emit_ethernet(0xd3, &(0x7f0000000500)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x9100, 0x2, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x4}}, {@llc={0x4, {@llc={0xdc, 0x7e, "16", "1136be8e5e7b9ca5f7799747d0c443106e22c026b606ec28ee4ede084db4241bcfc75fa3de856fe37d3abefd793379717fa6936ed85d8d7069430ac40c7c2f4eb90f40659b2c408af424581f615efcaeb896028b49389381183e0e0307c2cfd23f61090f460b93b35b3c5c406be8ee771af3cd9954f54b683b030582f628501a16aa84ea451e0438ac2ae0a49e92616274e9b61564091e86c14226eedf565fadd5fa2af9607f47e8c2069dc2241300cea6cd86a9c0a16aa498d9"}}}}}, &(0x7f0000000600)={0x0, 0x1, [0x548, 0x36e, 0x217, 0xd7a]}) 00:23:32 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x401870cb, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:23:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 92) 00:23:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 93) 00:23:32 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2235.544051] FAULT_INJECTION: forcing a failure. [ 2235.544051] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.545876] CPU: 1 PID: 27652 Comm: syz-executor.6 Not tainted 5.10.217 #1 [ 2235.546895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.548100] Call Trace: [ 2235.548505] dump_stack+0x107/0x167 [ 2235.549046] should_fail.cold+0x5/0xa [ 2235.549616] ? create_object.isra.0+0x3a/0xa20 [ 2235.550297] should_failslab+0x5/0x20 [ 2235.550862] kmem_cache_alloc+0x5b/0x310 [ 2235.551469] ? mark_held_locks+0x9e/0xe0 [ 2235.552080] create_object.isra.0+0x3a/0xa20 [ 2235.552737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2235.553495] kmem_cache_alloc_trace+0x151/0x320 [ 2235.554202] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2235.554938] __list_lru_init+0x44d/0x890 [ 2235.555549] alloc_super+0x8b8/0xa90 [ 2235.556109] ? test_bdev_super_fc+0x80/0x80 [ 2235.556758] sget+0x110/0x510 [ 2235.557226] ? __put_super.part.0+0x2a0/0x2a0 [ 2235.557888] mount_bdev+0xf8/0x400 [ 2235.558415] ? msdos_mount+0x40/0x40 [ 2235.558967] ? setup+0xd0/0xd0 [ 2235.559447] legacy_get_tree+0x105/0x220 [ 2235.560046] vfs_get_tree+0x8e/0x300 [ 2235.560614] path_mount+0x1429/0x2120 [ 2235.561190] ? strncpy_from_user+0x9e/0x470 [ 2235.561832] ? finish_automount+0xa90/0xa90 [ 2235.562475] ? getname_flags.part.0+0x1dd/0x4f0 [ 2235.563176] __x64_sys_mount+0x282/0x300 [ 2235.563780] ? copy_mnt_ns+0xa00/0xa00 [ 2235.564372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.565153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.565921] do_syscall_64+0x33/0x40 [ 2235.566477] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2235.567230] RIP: 0033:0x7f4b8d524b19 [ 2235.567785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.570475] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2235.571594] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2235.572648] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2235.573689] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.574729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.575774] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2235.591862] print_req_error: 23 callbacks suppressed [ 2235.591885] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.594786] FAT-fs (loop6): unable to read boot sector 00:23:32 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:32 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:32 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x401870cc, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:23:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.799956] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2235.801202] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2235.802337] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2235.803497] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.804649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.805805] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2235.869207] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.870891] FAT-fs (loop6): unable to read boot sector [ 2236.375551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.376456] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.378093] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.379656] buffer_io_error: 6 callbacks suppressed [ 2236.379668] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2236.386025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.386864] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.388433] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.389982] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2236.391311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.392143] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.393748] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.395320] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2236.396631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.397489] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.399074] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2236.400650] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2236.401963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.402931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.403896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.404868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.407892] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2236.409039] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2236.410181] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2236.411310] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2236.488553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.489470] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2236.493533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.494414] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2236.495688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.496733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.497758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.498762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.499759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2236.500761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:23:49 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x4020940d, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:23:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:49 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x6006}, @val={0x1, 0x4, 0x5, 0x401, 0x3}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@mpls_mc={0x8848, {[{}, {0x19, 0x0, 0x1}, {0x8}, {0x9}, {0x9, 0x0, 0x1}, {0xa6, 0x0, 0x1}, {0x20}, {0xfffe1}, {0x5, 0x0, 0x1}, {0x80}], @generic="74e8db6797c93fa697f13c8c6969c1c749604bde4086e9a5f93c1870b001220bb3cacb2bac025aafc8df516293952cc15f5b1b0d04687844a33753938b98a5de7c13186454a9acfb88fd772e4a44a25a9b98c797a7189009b7a029b20fab0963ce882ba27f4134e0e1f77218a8a2faad032cf0b8089b562322bfe3e549dc19c22c848a286762e6220f4d"}}}}}, 0xce) syz_emit_ethernet(0xb5, &(0x7f0000000040)={@remote, @local, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@x25={0x805, {0x2, 0x1, 0x13, "2366e8d9cdf1d06c4d80204476505350ff817e33468d1eff88ee1c54d8176fd215704fc9fdd3accc8c55dd7a2cf996290b946958fba4267a2a1429c7da64985d3a1217e4e4abd43bc5671debe043c98254ea42e747e7d5011fe8fc06dc6f9c7995ddf2c3968548a7dc92c117b2bdc214f3fdbe2debbcd5e9086c1a8c05f42bebf64500919f69e5209ce3825066de95811c823e2acd0be3b78450978af60d306d"}}}}, &(0x7f0000000100)={0x0, 0x1, [0xace, 0xaa6, 0xc5b, 0x9da]}) 00:23:49 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, 0xffffffffffffffff, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:23:49 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:49 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x1a7801, 0x0) r1 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, 0x0, &(0x7f00000019c0), 0x200000, &(0x7f0000001a80)={[{}, {}, {'\x00'/11}], [{@fsname={'fsname', 0x3d, '-'}}]}) kcmp(0xffffffffffffffff, 0x0, 0x1, r0, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x9, 0x81, 0x5, 0x8, 0x0, 0xfffffffffffffffb, 0x20028, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2, 0x8}, 0x10200, 0x80000000, 0x4, 0x1, 0x1, 0x4, 0x2, 0x0, 0xffff8320, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r2, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000001700)=""/247, 0xf7}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000002d40)=""/83, 0x53}]}, 0x0, 0x0, 0x0, 0x0, 0xffffffdf, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x180, 0xa}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_user}, {@afid={'afid', 0x3d, 0x9}}, {@access_any}, {@version_u}], [{@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/sr0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@seclabel}]}}) dup3(r3, r2, 0x0) 00:23:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 95) 00:23:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2252.646606] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2252.647549] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2252.648417] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2252.649305] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2252.650179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2252.651058] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2252.656788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2252.669057] 9pnet: Insufficient options for proto=fd 00:23:49 executing program 1: syz_emit_ethernet(0x1e, &(0x7f0000000080)={@local, @empty, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "cd705cc2b86d0912"}}}}, 0x0) 00:23:49 executing program 2: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2252.726443] 9pnet: Insufficient options for proto=fd 00:23:49 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x10012, 0x0, 0x0}) 00:23:49 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:23:49 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, 0xffffffffffffffff, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:23:49 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x80041284, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2252.805314] print_req_error: 24 callbacks suppressed [ 2252.805330] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2252.817720] FAT-fs (loop6): unable to read boot sector 00:23:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaa9aaaaaaaa74aaaaaa0008f85e758c58a8004500009a2800004bbbe9ae06073221ac1414bb020010b1ec20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 00:23:50 executing program 2: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:23:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 96) 00:23:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2252.970383] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2252.971493] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2252.972540] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2252.973570] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2252.974598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2252.975627] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2252.991400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:50 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x80041285, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2253.329947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.330492] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.331490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.331986] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.332960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.333435] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.334392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.334886] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.335851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.336324] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.337290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.337771] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.338725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.339222] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.340176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.340661] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.341631] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2253.342560] buffer_io_error: 6 callbacks suppressed [ 2253.342567] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2253.343673] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2253.344350] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2253.345038] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2253.345704] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2253.346383] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2253.347058] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2253.347721] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2253.366821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.367338] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2253.379504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.380028] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2253.380763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.381702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.382555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.383411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.384256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.384852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.402719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.403349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.404213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.404790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.405644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.406490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.407342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2253.408190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:24:08 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:24:08 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:08 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x80081270, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:24:08 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000001a00)="29522a6ad64f2c137467bea742dca096c09d7a21cbedb0d656f217d87c29cc43c0baaccdd104469d13d4d87a4c861375244e6f1d462d314ecf822c5af58affecd32b2f01a9396e550e924655e44b69eb8174c416b48408d5fa6e3641dfb4987c8e6e88c67bf5fc0af541e60784a7695b4639c91cda95717f9cf608b6ea674b92") newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8010000230002002abd7000ffdbdf2500000000ac000700ffffffff000000000000000000000000fe8000000000000000000000000000bb4e2200094e2400000200a00002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x800}) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000040)="6cc43510499806b719c393e5223b028e011f87e90017edf49aa37c877f6d38d275e1aea8ce41371ea420dfb9f3bea74d4fcb66edd1d4e45cff5d98e4b98b1f7fcf38a5e1b46436c1750a7c155c12ba0911f5226c62d1c005be18ac8c0cd6d4ee45900f81e41d1fd8a3", 0x69}, {&(0x7f00000000c0)="d006bd9f97221f9454a73ae64072f54993efa5c3398139994609a2be5f95dd546e9212424e7897d454d2d3cb602e1979d451570f4edf157bd8239923572348cf3dea9b071efa523fff3aae53e6a93a9eba047638f4183d97f9afcf75738a039859e65328fe38772b7f2ad9ad296a8f00952c4313afd5a9266d73e3890f03bca7d2d23b63b97ded23a933044c189c6c7369fb24f6b60a10ed40247b899f27fb9449e96917886bb9b8b600c0efc580db900125876953fc4258588c80c46aef5c52996f3068bc7b60787294d00d5c6001c1fdbdebc5", 0xd4}, {&(0x7f00000001c0)="3b4179a4d9c7db8825d00d6223d9d393999f3fac3a5dc38fe0f58cd96cceb63c2d1d23d9f241a9483d92e31cdb37ed13d463976d4dbee9c5ca5df9e18d008ba62314f4fc5c4c4b7e2c48f5888fcae4f99a1ded31c99cbe3aefe8b2b465cc5322d8883abebb6480cdda99a2871e80292cbdc8cfd0fdcb7c48cca004316a3a3c7bd5232a0406dcca7df12eeac527e4ab4b5268445eddc1952465fa7e276a318dca524c7a7c4c7d8e36fc8a7674827aad9005dc215ebc7f3ce2edeb533e3bf6a623e124f8dbc0c02372d43054a5c45e37bb0c240a0b1342b7c16fa87b792043aa270663411dc4381cd1112041210b8d165ccc9fbc", 0xf3}, {&(0x7f0000000600)="7d609352e0222a70d9f3c39b6ca9470a2226037708773d9c70887734297a98abed558f279377cfe80fe4dc31a5f7c5fdf1a9b11bf81bdb8b56a03d450a187496be31c8abcab691bce595e1169bb6116e9da3b98905463158667877f8f950fbbae42f38b8677457c870c6adff54aea6d418d49602a2bbc55aeebf84aa48407cd3110ddab06e91ccae90aa11dbe8a8741a955119d25da4c98d5ad1d07c5d114579d11410e0d4aefea81d44915c0b03be739eea93", 0xb3}, {&(0x7f0000000440)="76e2c9621f242045dc7b97080b4de186c3628f2969287544b6dfc80c20d8875b5d3648e6231cd24cc269fac22cd8a78c9adc9cceb4bbf3807e9e46501b56fca47858bad5a7303dee462fc71d673e6355d0e0373dc93f8346a8c5702532668e43dca85dfd9df79fb9c1e3769590ff9cff2e47ac5dc99bafb219bfa7829f7991abff3aa1c79addf295bc46d981aad7a2616ed7cdaff9cac6ce8263f310ca38db33730c1d5e0776e7a812716f5fa07675cbabfe4ba1b9f19dd218d6420a00451b8b4d", 0xc1}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000380)="97dcddded92909664bff7154e52095d228d14a1ebf61d282624dcb02a8447390137f6052513e82403313207342882c0420a9244e367f7b7a", 0x38}], 0x7, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000006c0)="5a3a97fad567018201d02f70d800ba493a41b9420ec03d1d427fc7b851914e420cedd27df81a2c7185f2a255b34260cf93467edd1e9237a585714eab954cfb8640af01ffc7eb0eb887464a31cf5d068b99b6bdc0e94f364e8883d805a2123e0e586f3cd505c908a4e73d8d29c6ffb0228075a97972a1e36b55f211391019ace4ccde66f3df171a53c8458c6e8c9b0071e192f31470a54e84bfe580adc1cf39a217da8e2304f07688bf07e26e729315c4e0f092d32b8fb3f71e1a082c8b2668ab01452c96135e364ab8b9c8d4bee33fcc16a1e51de132efa464918eb8917612687b79c4a83590a0ccc1af3ad46c4d17e6bcc2ebc58928d22fd7d854aa42d24d4bb75eb355f9079d25420dd8a37123b76db013f7fba6697b2aa9fecc111a1b06e8a309e97bc1424ae0e2c7bed983e45c9108292f89e024ba918d4af80665c271d78e231d176ad9c400666d421f19896f9b07dfda71d800044232b8a677e7b386968a835762a66d2cade73cb44bec502f5de22424b7a573368d3050963fde4f890abc36e0bd533af614ecdae6a1314aa04c1ee6bc13511742285d538c2d095d9caeadda1a2e22badb5510342dedb34c71707a2428f7d0fe355e2dfaf008d322fa65c8d50c7d5d55110d216669e6944363fa29850e4ca321f1d77fafc4f6819aa9402a855d563032c1c389470810593f8a18ebc6110b02cbc73c6d21b826d1ca8d3b0996cceb347d3968518710a0788e309f9e0355ba05c112b4ea199c051ed4053a02780a5f803045922ff6ed8d6d951225cc71d25b3bac6c31343b5fbb435fca7ec6f7bf381347595149971ddc10d7c45e97bc421861c63ae32e893e0ee9e208a9f7c4bd8d1cea295500376a841d9011acf74cf76f9691d9998eff22a6af814036d72621a18003c17a0d43069c116d953b8b60d8", 0x293}, {&(0x7f0000001700)="0a1d8479a685290a3031ea89c55f6efe8a319b78a3c0118fe354aeb9298e3f7fb20f07d439a45cf69affcddbb6c7e7878f405aaa0ce5481e6f33dade7b60f82b66f36fc3f22f3b07d2721f030c563874847c30d5691788c42907c1adcece4117ae89e16c7fdcdb3829d09fd514b348da52a99016960dee7935ac956bea84b4f8ab62a5d4e80a4a85014cfa7020de6052533aa1f7c23d29b6452812e9ba3556bce4fd06fb3e0b2dce76a863c644a1a3743087aa9191fce29f67f7c0467e20a32070c732b55441ef03967328dbae57a15bbb544b84085882b98b17aa31a590", 0xde}], 0x2, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe9a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x5e, [@multicast2, @rand_addr=0x64010100, @broadcast]}, @timestamp={0x44, 0x14, 0x11, 0x0, 0x0, [0x2df0c6e, 0x9, 0x4543, 0x12]}, @noop]}}}], 0xe8}}], 0x2, 0x4000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r7, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:24:08 executing program 1: ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000140)={0xee0c, 0x1}) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x1}, 0x1) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r7, 0x5394, &(0x7f0000000280)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x2000004, 0x20010, r3, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x2, 0x3ff, 0x0, 0x0, 0x5, 0x0, {0x3}}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) close(r7) ioctl$TIOCCBRK(r7, 0x5428) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa8000800450000280080000000069078ac1e0001ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 00:24:08 executing program 2: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:24:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.280745] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2271.281851] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2271.282892] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2271.283938] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.284979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2271.286022] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:24:08 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x810, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2271.369385] print_req_error: 39 callbacks suppressed [ 2271.369408] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2271.383307] FAT-fs (loop6): unable to read boot sector 00:24:08 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x80081272, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:24:08 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.629474] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2271.630595] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2271.631643] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2271.632674] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.633726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2271.634760] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 [ 2272.109893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.110463] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.111495] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.112461] buffer_io_error: 14 callbacks suppressed [ 2272.112468] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2272.122952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.123437] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.124402] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.125357] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2272.129525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.130035] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.131010] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.131947] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2272.134947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.135428] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.136379] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.137317] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2272.138099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.138573] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2272.139527] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2272.142922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.143425] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2272.144188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.144683] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2272.145457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.145979] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2272.187779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.188360] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2272.190920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.191408] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2272.192149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.192695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.193284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.193855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.194413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2272.195001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:24:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) (fail_nth: 99) 00:24:25 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000040)=""/203, 0xcb}]}, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) 00:24:25 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2288.366972] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2288.368081] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2288.369138] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2288.370177] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2288.371227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2288.372271] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:24:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.359997] RSP: 002b:00007f4b8aa9a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2305.361250] RAX: ffffffffffffffda RBX: 00007f4b8d637f60 RCX: 00007f4b8d524b19 [ 2305.362396] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200000c0 [ 2305.363550] RBP: 00007f4b8aa9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.364696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2305.365847] R13: 00007ffc6592c7ef R14: 00007f4b8aa9a300 R15: 0000000000022000 00:24:42 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:42 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xabf2}, @val={0x1, 0x4, 0x6, 0x2, 0x8, 0x1}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote}}, 0x2a) 00:24:42 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:42 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) fcntl$dupfd(r1, 0x0, r2) 00:24:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40c480, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) close(r2) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x1c, 0x19, 0x0, 0x3, 0xa, 0xffff, 0x4, 0x13c, 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1e0001ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540040009087fcf847d631780000ae0076bdbeb42686b9561284eb986c3af19f75f2bb47dab233ca1e7986243be26f175a000000001f000000cade89dc5012e8ebb03f00001300adaf5cea810d2aab4a67a44f7c4264762cf26a63538c"], 0x0) [ 2305.648083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2305.689160] print_req_error: 22 callbacks suppressed [ 2305.689180] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2305.692933] FAT-fs (loop6): unable to read boot sector [ 2306.038659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.039308] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.041243] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.042377] buffer_io_error: 6 callbacks suppressed [ 2306.042385] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2306.053293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.054200] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.055361] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.055383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.057000] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2306.057541] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.059757] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.059807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.061346] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2306.061929] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.064229] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.064256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.065873] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2306.067411] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2306.068607] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2306.068678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.070435] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2306.070463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.072378] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2306.072407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.074175] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2306.210547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.211185] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2306.215336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.215901] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2306.216694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.223064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.223682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.224411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.225112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2306.225731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:24:59 executing program 7: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:24:59 executing program 1: ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x1) syz_emit_ethernet(0x119, &(0x7f0000000000)={@local, @random="0915669cc61a", @val={@void, {0x8100, 0x1, 0x1, 0x6}}, {@x25={0x805, {0x2, 0x0, 0x17, "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"}}}}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000140)={@multicast, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x5d, 0x68, 0x0, 0x4, 0x21, 0x0, @empty, @loopback}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x9, 0x0, "a1e4f8", 0xc0, "92accd"}, "f8d9fc1593eb7047dde05485bb545a77418a06897ca2ecaa491ffcacd67abc1b81fd77f94cd7089bda621c109139ca654cd277891f6766d576"}}}}}, &(0x7f00000001c0)={0x1, 0x2, [0xc, 0xcc3, 0x681, 0xf3a]}) 00:24:59 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/software_nodes', 0x82000, 0x41) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sendfile(r1, r2, &(0x7f00000005c0)=0x4, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="88"]}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xf, 0x100, 0x70bd28, 0x25dfdbfe, {0x13}, [@typed={0xffffffffffffff8c, 0x1c, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) sendmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x14008000) lseek(r3, 0x5674, 0x4) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r5, 0xff) 00:24:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:24:59 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:24:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}], 0x2, 0x12001, &(0x7f0000000d80)={0x77359400}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8010000230002002abd7000ffdbdf2500000000ac000700ffffffff000000000000000000000000fe8000000000000000000000000000bb4e2200094e2400000200a00002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000dc0)={r3, @rand_addr=0x64010100, @multicast2}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x17, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x3f, 0xf, "fce9"}}}}, &(0x7f0000000200)={0x1, 0x1, [0x80c, 0x6f0, 0x5d3, 0x8a1]}) syz_emit_ethernet(0xc8, &(0x7f0000000000)={@broadcast, @multicast, @void, {@generic={0xf8, "237c6903e96f64b405bf897b65b6f24e6eb42ef05d412cde4be4d8e55d33d29551e5af6a00618a34eb00de2bdd26f59bf7a56aa9efa17781a175e5a1d1c190dafcbe5b0cd1c08863e025e331bc36e2dab781ac58da6b4f523cd0df460a7a37c59725617c68eeb504b3ba8785f8709e31cb50cb19849bcd570a39d6d9cbcf296f967a08a3f403cd2dcdca4cbfe5dd87e8208e7d350b6a1e0e6711302ddda37c763dc1903d19ce0c6922393d38763487487b565c7100b23b57dfbd"}}}, &(0x7f0000000100)={0x1, 0x1, [0x890, 0x869, 0x502, 0xf8c]}) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@generic={0x6558, "0ad30669804eeb755dc8aa1e5a5c71059cde14506d75cf9bb0b4072fb57fecb1010aff44b780fac9b2123bd7"}}}, &(0x7f0000000180)={0x0, 0x1, [0x9cf, 0xdde, 0xc1f, 0x1d]}) 00:25:16 executing program 5: syz_io_uring_setup(0x7321, &(0x7f0000000000)={0x0, 0x70bd, 0x4, 0x0, 0x26f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x6000, @fd_index=0x7, 0x8, 0x1, 0x0, 0x1, 0x1}, 0x6) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000140)='./file0\x00', 0x1) 00:25:16 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0xc0189436, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:16 executing program 7: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:25:16 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x3}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:25:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:25:33 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x6}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:25:33 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0xc020660b, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:33 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x422280, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x1e, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @remote, {[@rr={0x7, 0x17, 0x29, [@broadcast, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101]}, @cipso={0x86, 0x10, 0x2, [{0x6, 0xa, "f2ec415023f35600"}]}, @timestamp_prespec={0x44, 0x34, 0x6, 0x3, 0x4, [{@broadcast, 0x7ff}, {@rand_addr=0x64010102}, {@multicast1, 0xcbc3}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@loopback}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:25:33 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:25:33 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = timerfd_create(0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0xffffffffffffffff, 0x4}) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x19295, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000240)=0x0) r9 = inotify_init() ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000540)={{}, r8, 0x0, @unused=[0x400, 0xef9d, 0x94, 0x8], @devid}) open_tree(r1, &(0x7f0000000140)='./file1\x00', 0x8000) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000001840)={0x0, 0x7, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002200)={r10, 0xffff, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000440)={0x7, 0x0, {0x6, @usage=0x5a58, 0x0, 0x80000000, 0x6, 0xffffffff, 0x1, 0x8, 0x35, @struct={0x1, 0x4}, 0x9, 0xfffffc00, [0x8, 0x7ff, 0x101, 0x5, 0x2, 0x80000000]}, {0x1, @usage=0x1, 0x0, 0x0, 0xffffffffffffff3c, 0xffffffffffffffc0, 0x1, 0x1, 0x40a, @usage=0x6, 0x7, 0x1ff, [0x0, 0xffffffffffffffff, 0x1, 0x5de, 0x9, 0x752]}, {0x1, @struct={0x4, 0x20}, 0x0, 0x4b3, 0x8, 0x3f, 0x0, 0x7fffffff, 0x44, @usage=0x9, 0x3, 0x8, [0xcd6, 0x4, 0x1, 0x0, 0x2, 0x6]}, {0xfffffffffffff46b, 0x3ff, 0x7ff}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000840)={{r0}, r8, 0x8, @inherit={0x50, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffff2f48, 0x1, {0xd, 0x9, 0x337ad4f6, 0x20, 0xf3}, [0x100000000]}}, @devid=r11}) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) [ 2356.300157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:33 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x7}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:25:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0xfffc}}}}}}, 0x0) 00:25:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500ffd7000000000006907864010102ac1414bb018900f8ac1e01010a010100e0000001ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000001e202e4fbede000000"], 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/211, 0xd3, 0x2002, &(0x7f00000001c0)=@isdn={0x22, 0xba, 0x6, 0x7, 0x20}, 0x80) 00:25:33 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x9}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:25:33 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0xc0481273, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:33 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x2, 0x4, 0x2, 0x0, 0x101}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x90}}, './file0\x00'}) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f00000000c0)={0x1ff, 0x7fff, 0x1, 0x6393, 0x1000}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x1c, 0xe, 0x19c, &(0x7f0000000440)}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:33 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) [ 2356.636091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:33 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0xa}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:25:33 executing program 5: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x9, [0xffffffffffffffff, 0x86c1, 0x3f, 0x9, 0x7fff, 0x20]}) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x785f37986fcf2278, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:33 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:33 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x900, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:33 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:25:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:25:33 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) [ 2356.834233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2357.071642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.072215] print_req_error: 6 callbacks suppressed [ 2357.072226] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.073723] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.074666] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2357.083874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.084354] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.085949] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.086920] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2357.088124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.088615] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.089726] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.090677] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2357.091677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.092245] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.093218] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.094167] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2357.095155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.095632] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.096691] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2357.097640] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2357.098634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.099207] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2357.100205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.100707] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2357.101491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.104818] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2357.117524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.118236] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2357.122109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.122628] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2357.123411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.124576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.125192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.126534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.127140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.127713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.185434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.186025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.186558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.187720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.188277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.188832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.189368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2357.189936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:25:51 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:25:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0xd}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:25:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffc, 0x0, 0x0, 0x6, 0x0, @multicast2, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 00:25:51 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe02, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', 0x0, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:25:51 executing program 5: syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x2) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x3) openat$sr(0xffffffffffffff9c, 0x0, 0x440000, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:25:51 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:25:51 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2374.727529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:51 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100010000040200088caaef080024c817539dde5526dec569be11b4d7af6a487ead1bdf8a144b3c5f52aea47f533ae20399ec775776173c24b2287ce38fc72c7788171aac1b42e06ef1bcc215eec29778f82013c35a5c5ce0b530cb81109f89e4d90c6ee80addf352e5acc08348ce75993fab06843da487a35fe7f23b4b21cfdcd6b220f6b8d5dabe27c320bbc919c345f393804dfa059f68021ee7ef68a2951cae75f185a6fab778a2bccdedf317f7581893d2944fe88680a8ea7b88b855e05bbf94aac8ef0212"], 0x0) 00:25:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0xf}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) [ 2375.268479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.269447] print_req_error: 38 callbacks suppressed [ 2375.269466] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.272093] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.273800] buffer_io_error: 14 callbacks suppressed [ 2375.273812] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2375.283111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.284045] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.285816] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.287524] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2375.289055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.289979] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.291716] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.293429] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2375.294864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.295737] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.297570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.298484] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.300199] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.301900] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2375.303161] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2375.304852] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2375.306249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.307294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.308667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2375.317828] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2375.319108] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2375.320355] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:26:09 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:26:09 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@bcast, @rose, @netrom, @netrom, @rose, @netrom, @default, @netrom]}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000004340)=""/4101, 0x1005}, {&(0x7f0000001440)=""/130, 0x82}, {&(0x7f0000000200)=""/55, 0x37}], 0x6, &(0x7f0000001580)=""/80, 0x50}, 0x9}, {{&(0x7f0000001600)=@ax25={{0x3, @bcast}, [@netrom, @remote, @netrom, @rose, @netrom, @rose, @null, @netrom]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000001680)=""/251, 0xfb}], 0x1, &(0x7f0000001780)=""/92, 0x5c}, 0x10000}, {{&(0x7f0000001800)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/41, 0x29}, {&(0x7f00000018c0)=""/121, 0x79}], 0x2, &(0x7f0000001980)=""/43, 0x2b}, 0x100}, {{&(0x7f00000019c0)=@isdn, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a40)=""/138, 0x8a}, {&(0x7f0000004280)=""/56, 0x38}, {&(0x7f0000001b40)=""/193, 0xc1}, {&(0x7f0000001c40)=""/134, 0x86}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/225, 0xe1}, {&(0x7f0000002e00)=""/32, 0x20}, {&(0x7f0000002e40)=""/182, 0xb6}], 0x8, &(0x7f0000002f80)=""/74, 0x4a}, 0x4}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003000)=""/182, 0xb6}, {&(0x7f00000030c0)=""/45, 0x2d}, {&(0x7f0000003100)=""/163, 0xa3}, {&(0x7f00000031c0)=""/255, 0xff}], 0x4, &(0x7f0000003300)=""/130, 0x82}}, {{&(0x7f00000033c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/22, 0x16}, {&(0x7f0000003500)=""/228, 0xe4}, {&(0x7f0000003600)=""/71, 0x47}, {&(0x7f0000003680)=""/252, 0xfc}, {&(0x7f0000003780)=""/23, 0x17}, {&(0x7f00000037c0)=""/50, 0x32}], 0x7}, 0x5}], 0x6, 0x40, &(0x7f0000003a00)) syz_io_uring_setup(0x4d7f, &(0x7f0000003c40), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000003c00)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="00006001028001040700030060c10300fb8c2df8ca6c809fcfd5a14b15cdd4d8c6d5c1e9e014cf0d114d2edf7a6a9d313f37df7a6b7944ae00d3b2c1add3ed4fb8824f428bb9f840a0a0559c41ef26b13d6d5ea222e5dae9502f781e7b0a00be11f49cc7a84df440a59f1be0928375ac853f8bd31f5a61d2d8b10ffca23ba33df1713945e2d7259ca52ababa35a2e0fa6870741d2b000000cdcb62302ef778ae6b10fed89d801384bd85b34827e867e0e8aaef9849b79bbd1668af99403f6a55d19814ca5620e49c5ea407aa2f33f93f0b0f90bda37e613f987f93c6db52003420d39a593d73fa15d175a726b3257e4c38e37d66487ef556e688fe0b5a5db966f102786f7d75a2a54bce90d0f88d36331230459895666a3871bdfaf2fca2ffe2bec1a51f7b0fa86ba4bd79b935569e3ec69fd521e99eb1"], 0x98) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$tun(r3, &(0x7f0000003b00)=ANY=[@ANYBLOB="00000000922c193193eaf36089a13b4e38bd57714c9b631c9100f77996233627667bccaa7b313ae7a4a00456209787dd23648bdf39a8e935c5760892bf4c346623877511f39aee2836bf8db660b702f9ad54fa031c9e5ffe3b92ab27687dfa934bc27d453b12172c36d668e80cdd2fa788fce448b4f466780000a3f124a18cbd298dd42549866f680ee043a5742bdd94b9c5bcce144d102e2f33e5d14a73573b9ea716baddb562fc9a357d03209ab5f8474f06f92cf84dbb8b44f322d0602687927a4728d0eeb440346d2ce560f4fe5a48f41866c39156"], 0x56) r4 = gettid() r5 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000004180)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004140)={&(0x7f0000003e40)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c008d800500480000000000da00458046fa8ead63c47ded1689fc24de64783d0bfd42be0c2d81b77f1472bdfa9d9da40c6691e08b5fcc68bd7e628eb53d1f7b8807112fac5e93d61e5e08b443dd7eacb14244908107b584dd58e3603e5ba19f4fca49796699e4228d4719776d5ca61b4299c6a4625cc9364dd40e8189a0230e7bef188b73b1440fd1cd9185163c73e70e5d80eb0173fb596066a79a82848036dbb1d6ed6faeca5fbb28ae6dade79883086fa06c99bbe8722cae0c13822eab10404ad24ff81041472913b5159163d4e967dc14005e00fe88000000000000000000000000000100000c007c8008009600", @ANYRES32=r5, @ANYBLOB], 0x2ec}, 0x1, 0x0, 0x0, 0x20000051}, 0x24000894) r6 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d79, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x20}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000003dc0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0xfff, 0x2, &(0x7f0000003cc0)="934c907de170da96a5579bdc1227787d4e47b4aba3938c14dcc7d66c5daac69b6dcc3aef3e722edc4194a9f8cf3f253dcae6ad8e76d5e4fefbe19bec8914c02514c347801ef1d5e483c1144258ac95d3fe79ce1e07d27880489b9f1c87810e94d842827f95c33e32d048d5e9f616f7461820ab92c4b9c2ca55a75996125e2e89b17d8510feaf8185379e97d2b801eca8faf44692d4aa785fe4c3ebb85b6c882eb1cfb562e1d3533598e412eadf442281c133cb7905d02f084a7b8384899647f89cb1b51af9181ebe3112acb12eba4ab69edcd1ae7491c788c4484a10c54903b3c26c1303891d3d0569c74b36e3e5a7354d", 0x1, 0x0, 0x1, {0x1, r10}}, 0xb7da) io_uring_enter(r6, 0x7d5a, 0xf70c, 0x2, &(0x7f0000000280)={[0x6]}, 0x8) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000041c0)="9e5d355d8065074cba0013dfe8c0ba90333a3e4c14731e701034c7408c156b9fd63c8f1029c5381c9c4d7a79cf4e5348f2e9ebd14267a4f03aada4f7566f4fb872c880261c3e8a56bdde00392d38176e419725787c2739cec081a60f8f7d46cb71facee14fde3ddafaabced51ecfc37726574b0404eba4f2cc20b5f4606349f42466deace9971cc9d7d9323112b45a099068e9a9aeda3aa1b0a421ca2c3acdcad0", 0xa1) 00:26:09 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:09 executing program 5: openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0}) 00:26:09 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', 0x0, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:26:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x10}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:26:09 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe03, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2392.375448] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:09 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2392.865964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.866502] print_req_error: 6 callbacks suppressed [ 2392.866513] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.867893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.868339] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.869263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.869708] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.870641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.871111] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.872023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.872477] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.873409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.873875] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.874796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.875238] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.876144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2392.876584] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.877471] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.878362] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2392.879016] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2392.879887] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2392.880504] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2392.881142] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2392.881778] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2392.882406] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2392.883047] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2392.883667] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:26:27 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:26:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x11}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:26:27 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x2bb, r1, &(0x7f00000000c0)=0x3, 0x7f, 0x0) fallocate(r0, 0x4, 0x5, 0x1) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0xfffffffffffffffb, 0x0, 0x9, @scatter={0x2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/62, 0x3e}]}, 0x0, 0x0, 0x2210001, 0x10, 0x8000003, 0x0}) 00:26:27 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', 0x0, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 00:26:27 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:27 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe04, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0xc0400) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1, 0xffffffff, 0xdfda) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010076f0dd3c63c306a97b84", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40900) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c000200050011808000"/28], 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000740)={{}, 0x0, 0x0, @unused=[0x3ff, 0x7, 0xccd5, 0x400], @devid=r7}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000040)={{r6}, {@val={r7}, @actul_num={@void, 0x4, 0x65}}}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf0, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @remote, 0x100}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) r9 = socket$inet(0x2, 0x4, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) fcntl$setown(r8, 0x8, 0xffffffffffffffff) [ 2410.439239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2410.482461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:26:27 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x15}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:26:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) write$tun(r2, &(0x7f0000000680)={@val={0x0, 0xda41}, @val={0x1, 0x4, 0x0, 0x7b7d, 0xb1fb, 0x4}, @ipv4=@gre={{0x1e, 0x4, 0x0, 0x1, 0x136d, 0x68, 0x0, 0x80, 0x2f, 0x0, @private=0xa010102, @loopback, {[@rr={0x7, 0x7, 0x5b, [@multicast2]}, @lsrr={0x83, 0x23, 0x34, [@local, @loopback, @private=0xa010100, @loopback, @remote, @loopback, @rand_addr=0x64010101, @private=0xa010100]}, @rr={0x7, 0xf, 0x1f, [@loopback, @empty, @remote]}, @timestamp={0x44, 0x28, 0x90, 0x0, 0x6, [0x853, 0x5, 0x4, 0x1f, 0x401, 0x3, 0x9, 0xeece, 0x9]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xcd, 0x2, [0x7c, 0x7], "33c52ebea2caff02cb839e188108d80ea7d49bce8a71908932368a9c70e2ad629942f0d3c9042d5a34a98024dd58a2fff5fb51d08ca8cc81b6f6027bad833664c4445b46b1b66bda5be543f48e722992798b2ebddd40bffc48371539e5ff1922b0e5e8d8a953b0ed112003a1bfeabdca32786619851eabadc55e6cc160e1bb4dbb40227adb16c805a9683735938ff94832400767038bcbc86349756cdf7b9a7d1ffaca64d3cc7c0f599858376536fa5b8fa5d5a2a99635ed01df4da4b1d1d411d82d156347de90285196ff4614"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x9, 0x200], "a20d8cb3312b655988c9890b98a3665f003acd9f37ef4f46ccd0439bc2cb288b94c4c2622f1c4d3bb2a4895ab6b546354f0b84c9f0ef89387cc026362da145498243894a7900c5870c92f3f91d2145fade0c12cb41b64ce71b5832dea83006d78d298c6b697e46df1b16344c71941e7a2bd0ebcad7d9685fde87e53ca1ea2525a76f8dc36315ed215c857c1bc8f023c7f2622b369ffd9d2cc15f7f8d9eb668ed03dd01ec88f713017fabd78fe1908c04a0a7450383154326674e8624dad9c99c15cecbe1a62140186d4a80fbfdb2746110d323ab5b6dc709cf1896e5ce5a68e5630ff6"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "8ec06b239164199d358ecf10c9a7b25b752b2ee66a7c191a255b2fa6126959f2036ec656a55880906bac875528042dee849f9355d8c25cae5d9b6eedd354ba7dfcf45252de084cfdcca6bd4e7be9941fa7c6bd09187ce812cc6f5cc69ec5c2b3345e1135c148ff62a8f1ab80723e9042b9b134eef8ab76a36a83887abfae50ca477136b10b0ed9b9fe4c735fa2184451f3a2e5803dfbac1257cd2a1c5cb043df6f71c5ae2f11304e81482324cc47173f84d89ef2997d91ec28591f6c5eef7e8b8522ecbc575cc65d8dfabceb72479536b82c158fcf55252cc6e4d72101b14fb4cbfac8d2260145f4d3aceac39564b1920e69259f3f70e89db5"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x1, {0x91a}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x37, 0x1, 0x0, 0x1, 0x6, 0x9}, 0x2, {0x24df, 0xff, 0x0, 0x10, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x4, "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"}}}}, 0x137b) 00:26:45 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x81) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:45 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:26:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x2e}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:26:45 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:45 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe06, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:26:45 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:26:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[0x0, &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[0x0, &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[0x0, &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfdr0, 0x77c4, 0x8, 0x2}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SG_IO(0xffffffffffffffff, 0x127b, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x0, 0x10, @scatter={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/235}]}, 0x0, 0x0, 0x2, 0x1000b, 0x1, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) 00:27:02 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe0a, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:02 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2445.591698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2445.743974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.744511] print_req_error: 6 callbacks suppressed [ 2445.744523] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.745975] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.746945] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2445.751990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.752488] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.753606] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.754563] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2445.755713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.756784] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.757741] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.758698] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2445.760992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.761492] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.762459] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.763421] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2445.764281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.764801] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.765807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.765842] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2445.766353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.768009] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2445.768514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2445.769717] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2445.771426] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2445.775815] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2463.711576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:27:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0, 0x74}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x0, 0x0) 00:27:20 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe0f, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) r6 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0xfffffffb) syz_io_uring_submit(0x0, r2, &(0x7f0000001540)=@IORING_OP_WRITEV={0x2, 0x1, 0x4004, @fd=r5, 0x10000, &(0x7f0000000380)=[{&(0x7f0000001440)="1a349cf221360e8df0f4d4890e3634cb4fc935ac5d08d751b8e79d8cfc4e6ad2e42ec5bc55568fb97cf86d09a2b48511f49935f39791ab0de7f207db11d8e0a098d33cc80fbea6c07315972e5ec42b6cc7ba43ae47b1adc0495ed80f0394e9270be89e0c7e95ad60b923599633916a646c2c3505a7cdc69f70abce6ac22c45d1fcc948a6187e88ca0dfccf42c819aedbd0e0d300d101102e610eb5dfb361efaa62f8a402c8ca605ed3c91f11890d7ce7abedb0598517f8775e9e71d7b2f5ecb3620d3c8ecdd15c1ec9d58bef01db30187d7602bddcd9c17cfee2e88009333f7b2d476e92fa58622207", 0xe9}], 0x1, 0x5, 0x1, {0x3, r10}}, 0x7f) syz_io_uring_submit(r1, 0x0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 'veth0\x00'}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="c9939e672839380a6b65eaed82638e257c7c635b540dc4644f904652d3798b58f25cabd8c3ed7d369c83937251f8e17cef951417b7855fd04c71687d6bb4ddbdc391287f9d9dcb56d327520c44173e056dcf22ad858fabddac30bb41c31fa9a8f1a8e3988d963668d6b995474b8b37", 0x6f}, {&(0x7f00000001c0)="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", 0xfd}], 0x3}, 0x0, 0x20000080, 0x1}, 0x5) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xe8b40, 0x0) io_uring_enter(r11, 0x6294, 0xfb13, 0x2, &(0x7f0000000340)={[0x6]}, 0x8) r12 = getpid() syz_open_procfs(r12, &(0x7f0000000000)='oom_score_adj\x00') ioctl$SG_IO(r11, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:38 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe48, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:27:38 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:27:38 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002800008e63e27e21aa6e830001ac1414bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000ff7f0000"], 0x0) 00:27:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x2, 0x0) 00:27:38 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2481.618593] print_req_error: 22 callbacks suppressed [ 2481.618614] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2481.641608] FAT-fs (loop6): unable to read boot sector 00:27:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) 00:28:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x5, 0x0) 00:28:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:12 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003280)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/116, 0x74}], 0x8, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000ac0)=""/10, 0xa}, {&(0x7f0000000b00)=""/10, 0xa}], 0x3}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/87, 0x57}], 0x2, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001d00), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/41, 0x29}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/99, 0x63}, {&(0x7f0000001ec0)=""/215, 0xd7}, {&(0x7f0000001fc0)=""/216, 0xd8}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x4, 0x40000040, &(0x7f00000033c0)={r2, r3+60000000}) r7 = fcntl$dupfd(r4, 0x0, r6) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000003400)={0x2, 0x0, 0x3f, 0x4, 0x3ffc}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x81, 0x20, 0x3f, 0x1, 0x0, 0x9, 0x40a, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x100, 0x4, 0x8, 0x3, 0xa9f, 0x80000001, 0x1, 0x0, 0x8}, r5, 0x8, 0xffffffffffffffff, 0xa) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:28:12 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe68, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:28:12 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:28:12 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:28:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0xffffffffffffffff}) openat(r3, 0x0, 0x30140, 0x16) preadv(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fsmount(r2, 0x0, 0x88) r4 = getpgid(0x0) rt_tgsigqueueinfo(r4, r4, 0x0, &(0x7f0000000700)={0x6, 0xfffffffe}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000600)=0x2) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x8001, &(0x7f00000190c0)) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf25010000000800040000000000080002000500000008000700ffffffff08000c0001000000"], 0x34}}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="10402cbd7000fddbdf2530000000050035000900c000050035003f00000008000200", @ANYRESOCT, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000) 00:28:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfdr2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40900) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c000200050011808000"/28], 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000740)={{}, 0x0, 0x0, @unused=[0x3ff, 0x7, 0xccd5, 0x400], @devid=r7}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000040)={{r6}, {@val={r7}, @actul_num={@void, 0x4, 0x65}}}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf0, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @remote, 0x100}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) r9 = socket$inet(0x2, 0x4, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) fcntl$setown(r8, 0x8, 0xffffffffffffffff) [ 2534.632467] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2534.645606] FAT-fs (loop6): unable to read boot sector [ 2534.704338] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2534.706623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:31 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:28:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x8, 0x0) [ 2534.787077] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2534.791946] FAT-fs (loop6): unable to read boot sector [ 2535.064919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.065814] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.067468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.068294] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.069900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.070684] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.072302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.073132] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.074768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.075550] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.077127] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.078675] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2535.079825] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2535.081371] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2535.082506] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2535.083645] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2535.084783] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2535.086019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.086931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.087843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.090760] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2535.091925] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2535.093044] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2535.121107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.121991] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2535.128874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.129715] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2535.134678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.135688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.136689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.137670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.138639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2535.139621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:28:50 executing program 2: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:28:50 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:28:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfdr0, @ANYBLOB="7d0e0000006c65007d7e9313fcb2c15c938366024ef1bb4418d1fea0b2c7bd9654d09a3b802b1e56acee6102402572cee5a1bcabe80a4051a21409e62ae878c4b18c7bd31d9d1bbbd867f726740c17d495ed8018086a5496ae1a7e0885169c1bf7f7cd177335bff0a904f148f46dfd2ff774844278a72dfc3169b50a73ddf5"]) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001d00000426bd7000fbdbdf250b000000050038000000000008003c00", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24048010) 00:29:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0xd, 0x0) 00:29:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x41424344}, 0x3, 0x101) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x1ea}, @val={0x0, 0x1, 0x5, 0x3, 0x0, 0xff}, @ipv6=@tcp={0xb, 0x6, "815476", 0x23d, 0x6, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@srh={0x3a, 0xa, 0x4, 0x5, 0x1f, 0x28, 0x5, [@loopback, @rand_addr=' \x01\x00', @private2, @empty, @private2]}, @fragment={0x2, 0x0, 0x1a, 0x1, 0x0, 0x7, 0x67}, @dstopts={0x84, 0x0, '\x00', [@pad1]}, @srh={0x2f, 0x2, 0x4, 0x1, 0x2, 0x38, 0xffff, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x4e22, 0x4e22, 0x41424344, r2, 0x1, 0x0, 0x51, 0x4, 0x1, 0x0, 0x78e, {[@exp_fastopen={0xfe, 0x9, 0xf989, "364a15e841"}, @mss={0x2, 0x4, 0x400}, @mptcp=@remove_addr={0x1e, 0xb9, 0x5, 0x0, "cebbaf5fa54d0027350d32dc5ed51ea6855c0b093002a79c2e588f5b0304c9b188af8741d509be849640f7b8b9d13b681b5b8fa67bc66e7e1cbfdef13d5c2d1cb50fa91fb2613f4ef071c2068a2c6ffeee2ead96da58f99e71f81020b5142f02572ed999dbd0f4f375e9dc36b894679b3c60cdeda19aaa45b9b4abaed838e19b719d8377fd1970befb203309ea1d96f9266a26b7797a7556a81093db7ad555bcf905e09e7e02f044b54cbffd59758f3d443fb7d95e73"}, @mss={0x2, 0x4, 0x7}, @window={0x3, 0x3, 0x54}, @mptcp=@ack={0x1e, 0x4, 0x7}, @sack_perm={0x4, 0x2}, @eol, @mptcp=@remove_addr={0x1e, 0x5a, 0x1, 0x0, "cba115f5d6d870956638f4a4f6b6e34cf8ecceacfa0cba967f3a3d20120656475646d5e3ea0604fb0c400a61b6c9ff1bf0c942fa1520b29dadd7a4fb69f57fc8d0ebca3de8de75c89bdad241012a2a4873d0cc89bbc418"}]}}, {"debf6bec865e6d84242e905069956c830799b87a21a3119ebcc48ac0b9dd3f1f9f61c7c07f3758c7dd22d2ca04f340eb39535e2cb93bbb1db5be493bdf39f95175fe48a5544760b56b30adfdeef46769c7740e7f8dfcbca1a2a751cbec3b8bdd9dacf132073560a11e56b332c7027174db"}}}}}, 0x273) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x884c}, @val={0x1, 0x3, 0x8000, 0x6, 0x100, 0x7}, @llc={@snap={0x1, 0xab, '5', "8bbbc5", 0xf8, "f7833773cafe38370a6c6ae3770c8736794092c5650fd3040bfbcc7a13ee5e77bb70a6c24dde3582c5e15018f2cec74a50f39605f6d28f3405482137d9d47e99e302bf78b548923005258f7610b47d496d37551f960c438fa4772dce2f59dff14c106e9a536f39201a8bf626422a5ee942c4ce785b67f6869c395d3fa513c2a51604caa52fbf6afd2bd62abf541eea5590f1415b3c76447aa944e094262bb4bcee13cb58bc2fb6ce429e008cc007879742e6df1cf59bc3a87fa19bde976189085622157ec638d02882ab45773c2eb7c04f85e82e"}}}, 0xea) 00:29:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0xe, 0x0) 00:29:20 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 00:29:20 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 00:29:20 executing program 5: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000001d00212f0000118080000000ff1f29ecea2106628cf993d48792ffffffff2a4baff59b0228137dc700dc75ac155449f0e7f5a8f99687a43da61f728747f1e0f2d035b41d949d837606b510cf53d733"], 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000900)="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", 0x1000) fcntl$lock(r2, 0x2, &(0x7f0000000000)={0x2, 0x1, 0x8001, 0x9, 0xffffffffffffffff}) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:29:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd 89 9c 24 00 01 00 00 48 89 44 24 48 48 89 44 24 40 48 8d 84 24 [ 2583.739438] RSP: 002b:00007fe75a17e9f0 EFLAGS: 00010246 [ 2583.740276] RAX: 00007fe75a17eb10 RBX: 00007fe75ccf0f80 RCX: 0000000000000000 [ 2583.741405] RDX: 00007fe75a1810b8 RSI: 00007fe75cc56c30 RDI: 00007fe75a17ea10 [ 2583.742521] RBP: 00007fe75a1810a0 R08: 0000000000000000 R09: 0000000000000000 [ 2583.743639] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fe75ccf0f80 [ 2583.744755] R13: 00007fe75cc56c30 R14: 00007fe75a1810b8 R15: 00000000fbad2086 [ 2583.746233] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2583.748205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote, {[@noop, @timestamp={0x44, 0x39, 0xb5, 0x0, 0x2, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) write$tun(r2, &(0x7f0000000180)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="5efe1512d485", @void, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "019b834037265a7f"}}}}}, 0x1e) syz_emit_ethernet(0xb7, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@llc={0x4, {@snap={0xff, 0xaa, "30c7", "71f8d1", 0x201, "a7b4e387732c399de5137c07f652d8d169cf96fe8e538633454860ef0c66389ddd28f280dfd5381d95968ce7abb06f2548cb5c8763e138b2fffd967979078d80678bf977f857c301e082b35f02f7381bac4b17effc101c3b5a78a639aa7dbab5079475f711e092924a4dfa768799ee7f45aec7e8b4448aa33cf8f1708a4f4cf46a5505c9e7944b78b8c312ed68e980934b07072aeb88576e2502e865"}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x896, 0x90, 0x842, 0x1d6]}) 00:29:21 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x3a00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2583.846584] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 00:29:21 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 2583.861801] FAT-fs (loop6): unable to read boot sector 00:29:21 executing program 5: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 00:29:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0}) syz_open_procfs(r5, &(0x7f0000000240)='net/ip_vs_stats\x00') wait4(r5, 0x0, 0x4, &(0x7f0000000300)) 00:29:56 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x6, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:29:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00) 00:29:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) ioctl$SG_IO(r2, 0x127b, &(0x7f00000003c0)={0x0, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}) 00:30:17 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 00:30:17 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x200000) 00:30:17 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x0, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:30:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x48, 0x0) 00:30:17 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:30:17 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x7800, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:30:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x4, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8010000230002002abd7000ffdbdf2500000000ac000700ffffffff000000000000000000000000fe8000000000000000000000000000bb4e2200094e2400000200a00002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r6, 0x2, 0x81, 0x5, 0x8, 0x7e, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x20, 0x7, 0x3f}}) ioctl$SG_IO(r0, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r8, 0x2282, &(0x7f0000000040)) 00:30:32 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000028", 0x5d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000013800)) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465762f6c6ff445d801"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x1000008, &(0x7f00000001c0)='/dev/full\x00') syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x262) r4 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x400c2, 0xee) pidfd_send_signal(r4, 0x31, &(0x7f0000000340)={0x33, 0x979, 0x2}, 0x0) 00:30:32 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 00:30:32 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x7f00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:30:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x4000001d}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) pidfd_getfd(r4, r1, 0x0) 00:30:32 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x2000) [ 2655.624309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:30:32 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x1000000) 00:30:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x6c, 0x0) 00:30:32 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0x100000, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:30:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000006c0)=""/16, 0x10}, {&(0x7f0000000700)=""/8, 0x8}], 0x3, 0xb8, 0x200) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000600)={0x0, 0xfffffffffffffffd, 0xb3, 0x20, @scatter={0x5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/199, 0xc7}, {&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/216, 0xd8}]}, &(0x7f00000004c0)="01aa6880f12c3a3ba74515dfc933e438b9fac00ca5c06a782532e37a1872142b4126521a367f1542ad03f0b95198bb05bc82f834d9b2f01449b223bdeed26365b7c7cb5713a63b6a365ba3ee679f6c86fc5f621607e4ae5178fad276c20eca43a5c1fb55c6db6791c4e86d2772a9959fad9c5ceb143c7b22db7f503f3248c68371fa8faaee5c2629fb5173197414a9dabb2b1662596635b1d2a72f1299c1d7742e054e656986bec81bc5841e870deb645d3c6d", &(0x7f0000000580)=""/5, 0xffffff91, 0x10015, 0x2, &(0x7f00000005c0)}) 00:30:49 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x62, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x7d20, 0x23, 0x4, 0x7, 0x40}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0xe800) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/111) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) r1 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/195) shmctl$SHM_STAT(0x0, 0xd, &(0x7f000001ae00)=""/102392) [ 2672.644190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:30:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x7a, 0x0) 00:30:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x3f000000) 00:30:49 executing program 1: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x0, 0x1f, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) [ 2673.183313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.184206] print_req_error: 23 callbacks suppressed [ 2673.184225] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.186722] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.188322] buffer_io_error: 6 callbacks suppressed [ 2673.188337] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2673.200870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.201760] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.203398] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.204991] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2673.206910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.207772] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.209414] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.211051] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2673.212961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.213829] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.215452] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.217079] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2673.221873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.222747] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.224353] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2673.225958] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2673.227872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.228786] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2673.230839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.232248] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2673.233609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2673.234521] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:31:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b4040, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) dup2(r2, r1) 00:31:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0xf0, 0x0) 00:31:07 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r1, 0x5fb56000) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005b00)={0x7, &(0x7f0000005ac0)=[{0x1, 0x7, 0x80, 0xfffffffa}, {0x8008, 0x7, 0x9, 0x3}, {0x5, 0xff, 0x8}, {0x3e8, 0x0, 0xaa, 0xc544}, {0x8, 0x1, 0x6, 0xffff}, {0x4, 0x3, 0x1f, 0x8000}, {0x8, 0x0, 0x80, 0x8}]}) lstat(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000005b80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="80"]}]}, 0x1c}}, 0x0) 00:31:07 executing program 4: clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xffefffff, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:31:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) close(r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x120, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf7c}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x183a}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000800}, 0x40810) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x127b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2690.424354] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:07 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x112, 0x0) 00:31:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfdbg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2690.776735] [ 2690.776735] but task is already holding lock: [ 2690.777606] ffffffff8561afa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2690.778827] [ 2690.778827] which lock already depends on the new lock. [ 2690.778827] [ 2690.779953] [ 2690.779953] the existing dependency chain (in reverse order) is: [ 2690.780971] [ 2690.780971] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2690.781914] __mutex_lock+0x13d/0x10b0 [ 2690.782517] rfkill_register+0x36/0xa10 [ 2690.783147] hci_register_dev+0x42e/0xc00 [ 2690.783796] __vhci_create_device+0x2c8/0x5c0 [ 2690.786604] vhci_open_timeout+0x38/0x50 [ 2690.788759] process_one_work+0x9a9/0x14b0 [ 2690.789631] worker_thread+0x61d/0x1310 [ 2690.790468] kthread+0x38f/0x470 [ 2690.791183] ret_from_fork+0x22/0x30 [ 2690.791963] [ 2690.791963] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2690.793160] __mutex_lock+0x13d/0x10b0 [ 2690.794006] vhci_send_frame+0x63/0xa0 [ 2690.794817] hci_send_frame+0x1b9/0x320 [ 2690.795641] hci_tx_work+0x10af/0x1660 [ 2690.796450] process_one_work+0x9a9/0x14b0 [ 2690.796894] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2690.797333] worker_thread+0x61d/0x1310 [ 2690.799058] kthread+0x38f/0x470 [ 2690.799776] ret_from_fork+0x22/0x30 [ 2690.800539] [ 2690.800539] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2690.802007] __flush_work+0x105/0xa90 [ 2690.802801] hci_dev_do_close+0x131/0x1240 [ 2690.803677] hci_unregister_dev+0x149/0x430 [ 2690.804573] vhci_release+0x70/0xf0 [ 2690.805337] __fput+0x285/0x980 [ 2690.806049] task_work_run+0xe2/0x1a0 [ 2690.806843] do_exit+0xb6f/0x2600 [ 2690.807572] do_group_exit+0x125/0x310 [ 2690.808387] get_signal+0x4bc/0x22e0 [ 2690.809174] arch_do_signal_or_restart+0x2b7/0x1990 [ 2690.810207] exit_to_user_mode_prepare+0x10f/0x190 [ 2690.811216] syscall_exit_to_user_mode+0x38/0x1d0 [ 2690.812215] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2690.813268] [ 2690.813268] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2690.814459] __mutex_lock+0x13d/0x10b0 [ 2690.815281] bg_scan_update+0x82/0x500 [ 2690.816109] process_one_work+0x9a9/0x14b0 [ 2690.816988] worker_thread+0x61d/0x1310 [ 2690.817829] kthread+0x38f/0x470 [ 2690.818552] ret_from_fork+0x22/0x30 [ 2690.819332] [ 2690.819332] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2690.820893] __lock_acquire+0x29e7/0x5b00 [ 2690.821762] lock_acquire+0x197/0x470 [ 2690.822556] __flush_work+0x105/0xa90 [ 2690.823339] __cancel_work_timer+0x368/0x4c0 [ 2690.824237] hci_request_cancel_all+0x73/0x230 [ 2690.825171] hci_dev_do_close+0xd9/0x1240 [ 2690.826090] hci_rfkill_set_block+0x166/0x1a0 [ 2690.826983] rfkill_set_block+0x1fd/0x540 [ 2690.827823] rfkill_fop_write+0x253/0x4b0 [ 2690.828658] vfs_write+0x29a/0xa70 [ 2690.829382] ksys_write+0x1f6/0x260 [ 2690.830150] do_syscall_64+0x33/0x40 [ 2690.830817] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2690.831658] [ 2690.831658] other info that might help us debug this: [ 2690.831658] [ 2690.832842] Chain exists of: [ 2690.832842] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2690.832842] [ 2690.834891] Possible unsafe locking scenario: [ 2690.834891] [ 2690.835784] CPU0 CPU1 [ 2690.836451] ---- ---- [ 2690.837134] lock(rfkill_global_mutex); [ 2690.837749] lock(&data->open_mutex); [ 2690.838698] lock(rfkill_global_mutex); [ 2690.839662] lock((work_completion)(&hdev->bg_scan_update)); [ 2690.840543] [ 2690.840543] *** DEADLOCK *** [ 2690.840543] [ 2690.841446] 1 lock held by syz-executor.1/34750: [ 2690.842161] #0: ffffffff8561afa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2690.843535] [ 2690.843535] stack backtrace: [ 2690.844203] CPU: 1 PID: 34750 Comm: syz-executor.1 Not tainted 5.10.217 #1 [ 2690.845224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2690.846468] Call Trace: [ 2690.846870] dump_stack+0x107/0x167 [ 2690.847411] check_noncircular+0x263/0x2e0 [ 2690.848052] ? register_lock_class+0xbb/0x17b0 [ 2690.848737] ? print_circular_bug+0x470/0x470 [ 2690.849422] ? find_first_zero_bit+0x94/0xb0 [ 2690.850131] ? alloc_chain_hlocks+0x342/0x5a0 [ 2690.850800] __lock_acquire+0x29e7/0x5b00 [ 2690.851445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2690.852228] ? SOFTIRQ_verbose+0x10/0x10 [ 2690.852852] ? __lockdep_reset_lock+0x180/0x180 [ 2690.853572] ? mark_lock+0xf5/0x2df0 [ 2690.854134] lock_acquire+0x197/0x470 [ 2690.854716] ? __flush_work+0xdd/0xa90 [ 2690.855316] ? lock_release+0x680/0x680 [ 2690.855907] ? __flush_work+0x78c/0xa90 [ 2690.856527] ? lock_downgrade+0x6d0/0x6d0 [ 2690.857164] __flush_work+0x105/0xa90 [ 2690.857743] ? __flush_work+0xdd/0xa90 [ 2690.858333] ? lock_chain_count+0x20/0x20 [ 2690.858970] ? queue_delayed_work_on+0xe0/0xe0 [ 2690.859665] ? mark_lock+0xf5/0x2df0 [ 2690.860232] ? lock_acquire+0x197/0x470 [ 2690.860830] ? find_held_lock+0x2c/0x110 [ 2690.861445] ? __wake_up_common_lock+0xde/0x140 [ 2690.862162] ? mark_held_locks+0x9e/0xe0 [ 2690.862792] __cancel_work_timer+0x368/0x4c0 [ 2690.863452] ? cancel_delayed_work+0x20/0x20 [ 2690.864134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2690.864922] ? __cancel_work+0x1bb/0x2b0 [ 2690.865535] ? try_to_grab_pending+0xe0/0xe0 [ 2690.866200] hci_request_cancel_all+0x73/0x230 [ 2690.866886] hci_dev_do_close+0xd9/0x1240 [ 2690.867281] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2690.867505] ? rfkill_set_block+0x18f/0x540 [ 2690.867528] ? hci_dev_open+0x350/0x350 [ 2690.868605] FAT-fs (loop6): unable to read boot sector [ 2690.869170] ? mark_held_locks+0x9e/0xe0 [ 2690.869197] hci_rfkill_set_block+0x166/0x1a0 [ 2690.871606] ? hci_power_off+0x20/0x20 [ 2690.872198] rfkill_set_block+0x1fd/0x540 [ 2690.872847] rfkill_fop_write+0x253/0x4b0 [ 2690.873480] ? rfkill_sync_work+0xa0/0xa0 [ 2690.874111] ? security_file_permission+0x24e/0x570 [ 2690.874855] ? rfkill_sync_work+0xa0/0xa0 [ 2690.875468] vfs_write+0x29a/0xa70 [ 2690.876010] ksys_write+0x1f6/0x260 [ 2690.876553] ? __ia32_sys_read+0xb0/0xb0 [ 2690.877164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2690.877974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2690.878754] do_syscall_64+0x33/0x40 [ 2690.879304] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2690.880074] RIP: 0033:0x7fe3c38b3b19 [ 2690.880630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2690.883369] RSP: 002b:00007fe3c0e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2690.884494] RAX: ffffffffffffffda RBX: 00007fe3c39c6f60 RCX: 00007fe3c38b3b19 [ 2690.885556] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 2690.886615] RBP: 00007fe3c390df6d R08: 0000000000000000 R09: 0000000000000000 [ 2690.887669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2690.888752] R13: 00007ffd9284b8bf R14: 00007fe3c0e29300 R15: 0000000000022000 [ 2690.897153] ieee80211 phy350: Selected rate control algorithm 'minstrel_ht' [ 2690.982907] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:08 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)='./file0\x00', 0x14c, 0x460902, 0x23456}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x4) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd