x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:43:20 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) [ 1744.555232] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1744.555232] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1744.555232] [ 1744.620101] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,,errors=continue [ 1744.807498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.808041] print_req_error: 6 callbacks suppressed [ 1744.808052] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.809371] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.810250] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1744.816029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.816479] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.817387] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.818260] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1744.822933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.823376] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.824256] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.825122] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1744.825939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.826389] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.827286] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.828158] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1744.828971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.829422] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.830310] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1744.831191] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1744.832077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.832548] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1744.833334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.833804] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1744.834942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.835414] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1744.876351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.876865] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1744.877743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.878243] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1744.879019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.879559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.884976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.885516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.886135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.886668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.917907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.924976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.927932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.930919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.931461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.932085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.932611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1744.933244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:43:35 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:43:35 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:43:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:43:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:35 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:43:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x30103) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) pipe(0x0) 00:43:35 executing program 0: rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@empty, @private1, @loopback, 0x0, 0x0, 0x10, 0x0, 0x0, 0x400036, r2}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast2, 0x4e23, 0x8000, 0x4e20, 0x9, 0x2, 0x20, 0xa0, 0x0, r2, 0xffffffffffffffff}, {0x49195723, 0xe95, 0x0, 0x6c2, 0x2, 0x800, 0xfffffffffffffffa, 0x1ff}, {0x7, 0x800, 0xd3defa4, 0xc1ca}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in6=@private2, 0x4d6, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x3507, 0x0, 0x3, 0x40, 0x332, 0x7, 0x9}}, 0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001c000100000000000000a78c8bd11834"], 0x14}}, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000280)='./file0\x00') unshare(0x6a000a00) [ 1758.795513] audit: type=1400 audit(1713401015.343:46): avc: denied { associate } for pid=10779 comm="syz-executor.0" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:syslogd_var_lib_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1758.840147] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1758.840147] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1758.840147] 00:43:35 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(r0, 0xffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcd}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4000, 0x8) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000200)={{0x3, 0x2}, {0x0, 0x20}, 0x8, 0x2}) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/46) lseek(r2, 0x5, 0x1) sendfile(r1, r4, 0x0, 0x100000001) [ 1758.962614] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,,errors=continue 00:43:35 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4800, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:43:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 00:43:35 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1759.692056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.692983] print_req_error: 38 callbacks suppressed [ 1759.693001] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.695475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.696335] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.698010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.698863] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.700543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.701400] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.703087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.703946] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.705617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.706471] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.708125] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.709732] buffer_io_error: 14 callbacks suppressed [ 1759.709744] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1759.711713] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.713316] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1759.714490] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.716099] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1759.717280] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1759.718876] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1759.720060] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1759.721231] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1759.722511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.723471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.731894] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1759.733103] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1759.801805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.802779] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1759.802864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.804806] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1759.804899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.806818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.807785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.808763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.809722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1759.810690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:43:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:48 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c00, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:43:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:43:48 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:43:48 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:43:48 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:43:48 executing program 0: r0 = getegid() setgid(r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x14, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x4, 0x14}]}, 0x14}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r0}}}], 0x40}, 0x20040000) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000003c0)="68ef96cb8c2cb3b0f2270a78521fb08bb692749c1605fc4e63f316b590c5d4497e89f26c5f80603f39e71f848b54e087ce0d0705bdd35361c103d9aa82e460dade31ae1256736e0b2ccfb54a422a45531206038553800e074a769c99b505e6aa3c0af85472", 0x65}, {&(0x7f0000000600)="ff4c165951d14692749701ae8ec73cd2650d8885f65984739f4aed56f7416728f27fad50d1a086942391cff40a670fd7a596c561c267965b864e6143b47c904e89cfe82836cbcfd4b71e12e49ec6ed576b79c586c75ffc36367b56be47bf29e911297b2031ec430b31eb198847aea2dd44fa85d93ccac4ced4ba097a084862c48a026174f82c2a4665c671c085f8e93c2ac38de36e1bfceb9bc4f2fd2f69e0db3f3c950d1f2458703d9ee1be83dec6c2d057be7804e36b3101553862d16fa5fa916241", 0xc3}, {&(0x7f0000000340)="5d838092ade1282ccf3eb74a8322", 0xe}], 0x3, &(0x7f0000000700)=[@dstopts_2292={{0x1048, 0x29, 0x4, {0x2f, 0x205, '\x00', [@generic={0x0, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0xfffffff7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1f}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x0, 0x3f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x1ff}}, @rthdr={{0xa8, 0x29, 0x39, {0x84, 0x12, 0x2, 0x1, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x17}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @tclass={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x1198}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x2, @empty, 0xd271}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000500)="44fc1d5dbf0dbe3d94cca241187507271329fb92256de078e955385374662007adc69e32c2cfd526d72022932116f8f37a166275026c10a35ae8c441a9cfe809c80966dc9e44c40814226ba0cdcf86bd4554ff460de310300500a0bdd9b23f2417", 0x61}], 0x1, &(0x7f0000001e00)=[@flowinfo={{0x14, 0x29, 0xb, 0x81}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x84, 0x4, '\x00', [@generic={0x7, 0x1d, "555eb937c9cbd6a62b111731a29761479809983a1ff487698df46cc320"}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x33, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x5}, @generic={0x3, 0xbb, "3638f58eea71bc240bbc756c6058dda0d25b9366ae37caf134b5ce805edd0f067e7569d8bbf122620afc8be335ddf475c33dee1932cc9cd83af559bebd9416ce486438155a80be46f43753161d25efa3da2fd1f00918e5fc6c93af2dbe5d6e323ebbff8db5d4c530834f283aee6e8136f438c9fe0adfdcf5e61a47e080a16d17a16d8412e71656d02e5d96533bf7bfcfef1de010bee906dbed2d2826768f6e807562f200ad60d868b742db64578ac8fcc7df1e6993600d99956b1d"}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7b9}, @enc_lim={0x4, 0x1, 0x2}]}}}, @hopopts_2292={{0xa8, 0x29, 0x36, {0xff, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x3f}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3f, 0x7, [0x5f71, 0x1, 0x4]}}, @ra={0x5, 0x2, 0x1}, @generic={0x8, 0x4f, "f12d33303881ca85839f0fda4d4ece6d95dded08db701efa666c0e99e4460effb61bd1c98cbe03092b5d7f426c655ea0d0d8442fe43e2a0fd3aa4d98d9eab8b34f6f9405b38662064bc39604fef968"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x81}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x522}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x2, 0xff, 0x0, [@mcast2]}}}, @dstopts_2292={{0x260, 0x29, 0x4, {0x5c, 0x48, '\x00', [@generic={0x6, 0x76, "9d7d3295fa118533962821bcd18b2989f1b37d93c0b10d6b9d6c345983f3d95fb2db25c27243d673d8f7efcebe92418294401d75e2737c8049c5070883ac0af4d46e0ad9a704a1e4ea49eeeffcf9e61e337e30d82f0dd5bb05e7c77f03cbb43c91732aae0ff17a9ca432df42d37e67195950fdd054d0"}, @generic={0x1f, 0x67, "d16207074bc443785e17fa81a7536d18bd03d95b4998fb281a00567256e7088c89645796cfdce21b40db2b2a5a8d7f552e0388437938367fe305bcca2230d38537947a68d9cd158090ce59544e56190b2d0f666146ed113d15b4cab9cd79c6472531adec012256"}, @pad1, @generic={0x2, 0x23, "e820761afea751c77629736a8e14c72f928089d22e35aea31b83686af87d37be30fc19"}, @generic={0x7, 0x6a, "2f03bbd1e98fe997bc2f6e7d207585d29b20bc5d9471615b95a714efc17c23b268bf1236ae3f33af9936ada187ca8ad25178229e5cbea3cac3c38beae965eea7bfd87717167288559ea9e022d9dc6dad23bc29a2e45a567c3858534818a2528735399efc1d350cf97030"}, @generic={0x3, 0x52, "33753fe077da5ac5d9390980988a676442b5d2be8897cde4762ccada8ff8fabf15b8703b9ddcba5f13207a666955491f7d41cf0e67b38ffdf3a2a26eae60460bd99160aad900a1e6ff710ece9fe55cbd17f3"}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x40, 0x70, "b14cef0219883a0ea3352e0c1d0bfc88c207aa4db867a9823eb9e903d801b07c25f66bdfd0edb59808d6b06e115844824d691b4155b030872ec401ccff0f09d1c6c06f2dfc233cffba180e547909850f7ded2fba0aaa68bf73b91b4edfa99a4e17534c24c8843418fabd7997cff63c4c"}, @ra={0x5, 0x2, 0x3ff}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x0, 0x10, 0x0, 0x8f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1]}}}], 0x570}}], 0x2, 0x10) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r4}, 0x18, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() setgid(r6) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)={{0x1, r4, r0, r5, r6, 0xb5, 0x3}, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xd93e}) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r7, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 00:43:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x43}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = inotify_init1(0x0) r7 = inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x2000003) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x59f5ee0a7c70a1ba, 0x0, @fd_index, 0x3, 0x0, 0x1, 0x0, 0x1, {0x0, r8}}, 0x8000) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x10) inotify_rm_watch(r6, r7) pwrite64(r9, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) dup3(r9, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r9, 0x8000000) syz_io_uring_submit(r10, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r0, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6096153f00202c0020010000000000000000000000000000ff0200000000000000000000000000013a000000000000008800907800000000ff020000000000c13adb4085ce46d4f8109dca6a5c000000000000000001"], 0x0) [ 1772.367231] cgroup2: Unknown parameter 'AWEu3#c.Z@4? bvtP^w&{ݘix8}Y3?x+gsSd.>XPza˯PL[M;([ Cm_ \z#PdJ^؞?qZXPza˯PL[M;([ Cm_ \z#PdJ^؞?qZ0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:05 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6800, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:05 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x74) close_range(r0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x0, 0x80}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0x148, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @offload={0xc}]}, 0x148}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0), 0x0) fcntl$dupfd(r4, 0x406, r1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000400)={0x1, 0x0, 0x6, 0x3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200), 0x3) 00:44:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r1, 0x10000000) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x2c182, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r0, r1, r1, r2, 0xffffffffffffffff, r1, r3, r4], 0x9) 00:44:06 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) [ 1789.554269] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1789.554269] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1789.554269] 00:44:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c00, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1789.610800] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,,errors=continue 00:44:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:06 executing program 3: r0 = io_uring_setup(0x7f81, &(0x7f0000000180)) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x2}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup2(r1, r0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000000)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x2]}, 0x8) 00:44:06 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7400, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:06 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:44:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@cachetag={'cachetag', 0x3d, '/\x8f)\xd1-'}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@dont_hash}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_role}]}}) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:44:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1789.913752] 9pnet: Could not find request transport: rdma 00:44:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7800, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:06 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1789.972380] 9pnet: Could not find request transport: rdma 00:44:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1790.284845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.286233] print_req_error: 6 callbacks suppressed [ 1790.286245] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.287990] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.288876] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1790.289601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.290070] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.290955] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.291844] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1790.292532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.293008] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.293891] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.294740] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1790.295458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.295917] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.296779] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.297646] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1790.298369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.298830] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.299700] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.300569] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1790.301269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.301791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.302332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.304843] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1790.305480] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1790.306116] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1790.325388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.325896] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1790.326738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.327227] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1790.327951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.328484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.329035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.329567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.330121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.330653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.347365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.347988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.348526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.349077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.349610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.350160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.350693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1790.351250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:44:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:22 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) socketpair(0x21, 0x4, 0xfffffff7, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0x1a, @inherit={0x60, 0x0}, @subvolid=0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) r3 = socket$inet(0x2, 0xa, 0x0) dup3(r3, r0, 0x0) 00:44:22 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:22 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:44:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a00, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:22 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:22 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000000000000000000e6149dd479d4f5327760808f8b6d82671f28e75cdb0c86b263ec1ec70979c7efc5109fd350e5cea81194998cd777e7fc2aba89a17e90b0794bd59f9a75c877982ba8ae7d27b3dd8cff6b8b68031c8a42dd67a32411247f25e067ce450818193f5e728fe1b207f0d83ae73941549339056903fd90475b2a0676660e99"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x7f, 0x8f, 0x7, 0xc7, 0x0, 0x0, 0x79b60, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x8100, 0x31a2, 0x1ff, 0x6, 0x400, 0x20, 0x6, 0x0, 0x544f340b, 0x0, 0x80}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100003fefec8a6aafb9aac4", @ANYRES32=r2, @ANYBLOB="04000000000000003e2f66696c653000"]) r3 = getpid() r4 = pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pidfd_getfd(r4, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000500)=ANY=[@ANYBLOB="4d01680d0e0a000000181d0074dea567a41c5450768a65b21a1b3913b34caf21336a812364b50ae4444ba94178bda1b70012089a2b635ffb8a22241a8cb9994d0689c8860d2324771708b70eac9016f169c6f59b89373696a9bc08cfcee18f04", @ANYRES32=r1, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01006dd89fe684ed1d1501679b4f8c6b4adee71d4c9f144b13ed2ae5d2f0ad38ca411800001c0017000000180000cec26574683a73797a6b616c6c6572310000"], 0x38}, 0x1, 0x0, 0x0, 0x404804c}, 0x28000000) fsmount(0xffffffffffffffff, 0x1, 0x71) r6 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000052e00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053000)={0x376, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}], 0x6, "5c83c9bf8af498"}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x432000) 00:44:22 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x0, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1806.495045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.495963] print_req_error: 38 callbacks suppressed [ 1806.495982] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.498453] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.498507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.499476] buffer_io_error: 14 callbacks suppressed [ 1806.499483] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1806.502232] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.503865] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.503933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.504843] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1806.506813] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.508473] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.508902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.509448] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1806.510290] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.512828] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.512900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.513788] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1806.514623] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.516899] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1806.516968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.517873] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1806.519892] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1806.519959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.521459] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1806.521528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1806.523047] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:44:36 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:36 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:36 executing program 0: newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x2, 0x80, 0x6, 0x0, 0x3f, 0x80ac, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x8}, 0x8064, 0x3ff, 0x1, 0x4, 0x7f, 0x8, 0x3f, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xb, r1, 0x0) r2 = clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet(0x2, 0x5, 0x1) clone3(&(0x7f0000000380)={0x100360000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x2b}, &(0x7f0000000140)=""/229, 0xe5, &(0x7f0000000240)=""/230, &(0x7f0000000340)=[r2], 0x1}, 0x58) 00:44:36 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:44:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8202, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:36 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x200001, &(0x7f00000001c0)={[{'acl\x00\x00\xb8\xf5L\xb4\xef\x8d!\xf0[5k sJ\xda\x86\x903^\x8f\xe7\f\xe6\xb3\x83\xe2\a\xa6\xf0\x88_\xc7\xc2\xc1\xa2hpw\x85F\x99Nv\xb88s\x19=\x15w5\vG\xfb\xb0w\xf8Hv\x8bD\xd3\xed\xe4\xa5b(a\xba\x1d\xc6\x02k\x89\xb8.\xedi\x8e\xcd$\xee~\xed\xbf8r]\x9f\xa5\x18\x8a\xa9\xe4a\xfc`$X\x10:\xa1c\x97P\xf7G4E\xf9\x1b\xe3K/\xd2\xfb\ag\xa9\x1eo;\x00\x00\x00\x00\x00\x00\xf7\x04A\xbc7\xebY:\x03\x8f\x92\x150\xc1^\xc0\x9f\xf1\xac\xd9PS\xfeG\tcG5\x1c4\xcd&1\x86\x9c\x8b\x15hto\xfa&Hq\x18\x12\xe1f\x1e\xa7\xca\xb8\xd5P*%\xab\x88\xd7_\xd3f\xd6\xc5\x1e\x14\x05\xcfH\x8f\xb2\xd9e\xbb\xb4\x9eV|hi'}], [{@subj_role={'subj_role', 0x3d, 'nfs\x00'}}, {@euid_gt={'euid>', r0}}]}) 00:44:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1819.849643] audit: type=1400 audit(1713401076.398:47): avc: denied { checkpoint_restore } for pid=10938 comm="syz-executor.0" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap2_userns permissive=1 00:44:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x5271, 0x400, @private1, 0x1}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000000940)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}, {&(0x7f0000000840)=""/40, 0x28}], 0x8) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0x100000, &(0x7f0000000300)=ANY=[@ANYRES16=r4]) mkdir(&(0x7f00000008c0)='./file0/file0\x00', 0x29) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:44:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') close_range(0xffffffffffffffff, r0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r3, &(0x7f0000000180)='attr/keycreate\x00') timer_create(0x4, &(0x7f0000000000)={0x0, 0x1a, 0x5, @thr={&(0x7f00000003c0)="bbfd3e7a25d0a8d4e584a4c86c7723f7d8e23aabf343c7a1b3622a62db98dfdbf04f75b42214d556ddf4961a766c6cf5e4bdd8fc1260deda6ed672a0915436627d991dd6b7527b5b8aeca009495262e0d04a54001c18b8edf6da5ceddb0c88f808ca81117f76b7ab712c690c9a3769d2f12993d47aba27f39ac7ab30c17412333b53f9b71b98", &(0x7f0000001640)="533f52e9bee9afae9c5b938e9d8c4325fbe5ae1c1dab1c09110868523c3609093dd96b4806225c5f32803b17bf500304d43f72f2ec6c798d59522687c4ad3ed6f08c1a7827feceb3a754d36b5f5c4e327f540c06e9caba872f83aa8e74739307dfeb20a13242b85a20d83d5ffad997323eb830e7e59b158f2c083d0d6a73626d7e2bbf9c88fa11c7c173f0b87fe11f1030d4c057a61d9e4d1f19780b2ccb67caf765e43dd103c7f761b1"}}, &(0x7f0000000380)=0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x32, 0x4}, &(0x7f0000000140)) timer_settime(r4, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) read(r5, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r4, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) clone3(&(0x7f0000000300)={0x40182300, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x62, 0x0, 0x0, 0x0, {r2}}, 0x58) 00:44:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8203, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000000c0)) 00:44:36 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:44:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x871f, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:36 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:36 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1820.516320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.517680] print_req_error: 6 callbacks suppressed [ 1820.517699] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.520060] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.521616] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1820.533427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.534313] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.536506] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.538067] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1820.539364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.541042] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.542699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.543541] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.545148] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.545245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.546126] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1820.548067] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.549641] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.549711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.550550] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1820.552492] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1820.554047] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1820.554119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.555548] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1820.555618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.557108] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1820.557364] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1820.568865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.569708] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1820.569781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.572397] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1820.572468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.574014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.574950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.575911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.576849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1820.577747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:44:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xbe15, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:52 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="65c143dbbc91f1337e33e40f72a6ea1e9ed29fc254170fdcf7f590e47c4d2e9682c30a4daa36c8a1d3dbe9da", 0x2c}, {&(0x7f0000000200)="a99f5f6c01f1b5bc6dccb077f6db9bd4b5edcdc61e9133fbc8b9aee92a940df2d10abde0b6197f3fdc6c653f21abab8d531af24b1538731f2f1ba80294246dfae581dce529618823afd3bb7d241cf98d955df88541fda2d4d7af07f5a408c05596fa69f2b792b9f54e050cf4ed0da8b308750650f7588c71e80ebb393f82170f6c4d44e454c589365342b2410fa734b681951de8dfb52fb79e21e4fead6c2e63139c214d02629aabf9e5afbd940f92bdb6a3e116a67eadb5ee4734fe560013797a511bf8121bf22bc8bbe7b9040ef2a5726b23c8117ab2ec535186a2547c7b6d1b985aa501b3b9a3511259a2bb8112373f55015039df2ace61", 0xf9}, {&(0x7f0000000300)="7d84869680f8629355a2ab53e159c1d1c337e4ae063298683682023532257822a45fe7350b1ebfbeefb266adb6f0ad49b1d5c5cf66e33df933b0d19bd861240f9360fd954b3dc9a1e870cc02bdbc5ecdfd7ad28a18909de5f631cada60e6ddc4bafe884193b7ba57b7c139ba9328b20bcae47bb3420273f74c09b940b9fc44", 0x7f}, {&(0x7f0000000380)="2821db0744baf84b2cf8d0455ceeb9938e1ef83708cb13d77018abc6d5b920fac8d5e9c34e7708b8f38fb277b8173c659c1549aeb2b07a0ba0a8156d471d3bbfcf2e46b1b5a9d8196e6635d066442f2bc06a2097ef69182c94fe589423b1b169f3307675331a29c231a310c16292313af2588edb6ec784b6a5", 0x79}, {&(0x7f0000000400)="56ddf65a8345939afe4183c9fec92e7b2aafca8b88b3ba9f2843da8e279f98e7fba5618d1071f5def39d6601c27e64f6855e839b0f139acd629a7b80a3992cead4bcbc57c0e36e3982004d4bbfad92cef2088ce08f94170f48174c1e396dd599a538c4d0747c2978fd9fd6acee37a7115dd3a055d23d2f617ed9e8eabd02744211dda0d7d64cbd00e32a10cc4996ac1e3c658e8f077c3bce5359f36b6b5b137847f112268e749fd41c322d9cfb1feb6643fad61a885d33e1488f75ab8cca3eb96c5d1ffdbb3310b3a16a433300efad2261352ae473d7a44d01ac01658a57", 0xde}], 0x5) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f00000001c0)="1d", 0x1}], 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 00:44:52 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="90341347721b305d0ae5b943b1b62df9", 0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r6]) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000740)='-*(!\')]&.)\\^\'-+--\x06`*(\x1a)$-') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x81b03000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x430000, 0x30) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000001c0)={'bond_slave_1\x00', 0x2}) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000300)) 00:44:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:52 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:52 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:44:52 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:53 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:44:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:44:53 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc0, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:44:53 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:44:53 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032, r6}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000880)=0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x7f, 0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x0, 0xc5c1, 0xfc9, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xe, r1, 0xa) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r7, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) 00:44:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1836.936924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.937428] print_req_error: 22 callbacks suppressed [ 1836.937439] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.938816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.939267] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.940193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.940640] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.941554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.942016] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.942923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.943373] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.944302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.944748] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.945657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.946123] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.947032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.947475] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.948380] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.949258] buffer_io_error: 6 callbacks suppressed [ 1836.949265] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1836.950309] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1836.951181] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1836.951818] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1836.952450] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1836.953088] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1836.953712] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1836.954356] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1836.954992] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1836.985749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.986271] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1836.988710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.989208] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1836.990168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.990703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.991507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.992325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.993131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1836.993666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.015436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.016059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.016596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.017423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.018233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.018768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.019575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1837.020394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:45:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:06 executing program 3: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)=ANY=[]) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000400)=0x5) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000940)=""/149, 0x95}], 0x1}, 0x2) r0 = syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46, 0xfffffffffffffff8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x39, 0x36, 0x32, 0x39, 0x0, 0x38, 0x37, 0x2c, 0x34, 0x38]}}}}]}) mknodat$loop(r1, &(0x7f0000000240)='./mnt\x00', 0x0, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f00000007c0)=""/150, 0x96}], 0x3, 0xcae, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r2, @ANYRESHEX=r2]) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00040000"], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000c00)=""/213, 0xd5}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x3, 0x5545, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) 00:45:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf72f, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:06 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:06 executing program 0: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x204000, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0x0) stat(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000a00)=""/236, 0xec}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}], 0x1, 0x5545, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00', 0x0) splice(r2, &(0x7f00000007c0)=0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xde, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000800)=""/183, 0xb7}, 0x0, 0x40000140, 0x1, {0x2}}, 0x100) 00:45:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:06 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:06 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1850.252566] tmpfs: Bad value for 'mpol' 00:45:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) connect$inet6(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000018c0)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff2588}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 00:45:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff0f, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:06 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040)=0x6, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x80) 00:45:06 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:06 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x43ecf, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:07 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:07 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:07 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x43ed9, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1850.931488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.932421] print_req_error: 38 callbacks suppressed [ 1850.932440] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.934881] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.934950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.935868] buffer_io_error: 14 callbacks suppressed [ 1850.935875] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1850.936681] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.939897] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.939967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.940839] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1850.942782] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.944427] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.944625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.945355] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1850.947498] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.949114] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.949183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.950017] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1850.950843] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.953035] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1850.953102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.953958] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1850.954872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.955449] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1850.956301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.956832] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1850.958241] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1850.969264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.970272] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1850.970338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.971821] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1850.971893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.973397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.974341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.975293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.976252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1850.977192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:45:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r0, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0xb, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0xcd25eacd09071934, r1, {0x8b, 0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000240)={0x1, 0x7fffffff, @start={0x0, 0x0, "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", "1abe53ac06bee0d5a467e1bca968c9ef6da90d6e11e0350f9813c71f8214a010ee73cac4c84bb611007afcba1ed7dc4ab8deadbf01cfbefd0034fec94da687c15cde5705fed6f991a14e1b2831e5549906ba56af8e820ff452e4572074282a5493a26a33992c861a2145853c78d51369ed65f39c2deefe6ea66db9bed0e82a7c33bae2dac86d064c97bc2962e6284710c660a1fb39a820d4ed62689c3a2a2f6ad47f7db3f45a651b8fbdc53afac7646cc1832cff0abea00d05e08a36f36e524cdc75eb5ddcee1350cc3cfa37f51e308c0e5f10d4680a958422c83f766114d888c5f933bbfff3c83979938f93af7984ad6a1fbed27b2b3cd4e64bdffa9c8cb3e52fa073d5b7ad9d0348537bc0e9b7cf1b0d7124abad1fd07995ed38691277e0ee83e33824f11acf8c533d5929689bd7627e8686e9a113d8c236c4dbbca10fa13293a6b02d5c857c82225e635945ee509a0c396b59057daf951a7179a089af82885f79c5aa5afef333b42e5e9c1be625637cbba4df962f905b1c9726fe9591e43d47b0d4a60fd5f88b2bfc1087da5018c7caadf79e9dbbb1f5c97ca73868e161ff3c0c8d0a4fc707091d7a6f5472c6e7ac3effa8a0e5f0a2086f2c7565f1acf06981ca5f580457c6682f1d6f082582b64d7aa003e806dd184d7cd0f7b4872a18fee6f95b1d5a7259ffb38b5c474c03ef8856c78b0e0d2cc1c9f270e87096b3be0b21f910b53ead3f19b0833101619464c4c2978decedb930cf0b907dee520ffa88b9bb4f56f0c1fd97642da355a3e2d8a0b0941a82ed7ef0e3fb939a4dfc5d4af18cabc059358957bb401c9acd777664009ec791cfa916d4847c57ea384f339b6a595fe57118e65253fcfb2e2309529eef326ce7d68a8f0d8b477c4de0b1bcf613d7467f6c2b4d4090d5195145d671dc9d1cf46fd575ced3f9c02ac55d2d611174a621b2f575964d5343e4a4d81dbd7a67b993bc1b8d5fbc59ed759ae47d9c1b7a4fa93241cd6b0ac44ef568ee3a0516decf75678d4602c66dd5e8dc40f14ffee9085c7bcc560c29b009a532ddddce3bde5f88f594c67b4647621c2896727c6dc408d37a7f6972475086b7aae337fb20808f4ef91a73deba45fa3bb9256fb3e04039aef56adb010afc0b06c8730d839c08e8c990b76085461f60a3a305697b6b9e9ae4501a76b5b769768a2649c6810ab5104b7e3c84715e3d072016375a2b5b94a1129c487c46191cd7f718d4ef1e4ea9db7d0b9291e95fe8413565409ae94022d36a91d8f15a1c61c9a0a6b67b891e759a5e302180030f7754b1d6f35477a47044cd21cb5af150f55824830b4c7dfc1ead117bb872242c68c4bd852d889f46d9e07e3d1619809371884c12b6caa2009735f389c9715dc6265b74f3fd7f1f435d8ea31b76633f8ef169e670b6900917c897fffb18880701f32db1de9bbe3ecd77eb"}, [0x7, 0x100000000, 0x5, 0x3785e70d, 0x100000001, 0x0, 0xdde2, 0x986, 0x100000000, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0x70, 0x7, 0x0, 0x6, 0x80000001, 0x1f9, 0x6, 0xc2, 0x5f, 0x1000, 0x60, 0x4, 0x169, 0xa4cf, 0xcb8, 0xf12, 0x3, 0x80000000, 0x6, 0x5, 0x800, 0x4, 0x3, 0x4, 0x7, 0x10001, 0x400, 0x0, 0x6, 0x1, 0x81, 0xffffffff, 0x6, 0x3ff, 0x9, 0x5, 0xe00000000000000, 0x0, 0x7, 0x7ff, 0x6, 0x1, 0x5, 0x9, 0x7, 0x3, 0x10000, 0xffff, 0x4, 0x8, 0x9]}) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) flistxattr(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r6, 0x400, 0x0) flistxattr(r6, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) 00:45:23 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x43eda, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:23 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:23 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x2000, 0x150}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x12}, 0x80000001) clock_gettime(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, 0x0, 0x3) r6 = epoll_create(0xb60) dup2(0xffffffffffffffff, r6) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000500)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300) [ 1867.334683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:45:23 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x43edb, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1867.387937] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:45:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:45:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x43ee7, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) shutdown(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) r2 = dup3(r0, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @rand_addr=0x64010102}, 'vxcan1\x00'}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000580)=""/246, 0xf6}], 0x7) fallocate(r2, 0x1b, 0x5, 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) clone3(&(0x7f0000000900)={0x115000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x33}, &(0x7f00000007c0)=""/173, 0xad, &(0x7f0000000880)=""/21, &(0x7f00000008c0)=[0x0, 0xffffffffffffffff], 0x2, {r1}}, 0x58) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x47bf}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) accept4(r1, 0x0, &(0x7f0000000040), 0x400) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 00:45:24 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:45:24 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, r0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, r0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080), 0x0, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4040004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed410000e992b200dfd7655fe0f4655fe4f48a5f000008000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000000)) getdents64(r2, 0x0, 0x0) readahead(0xffffffffffffffff, 0xfffffffffffff045, 0x5a) 00:45:24 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1867.691796] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1867.691796] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1867.691796] [ 1867.708927] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1867.713467] EXT4-fs (loop1): get root inode failed [ 1867.714674] EXT4-fs (loop1): mount failed 00:45:24 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1868.207015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.207885] print_req_error: 22 callbacks suppressed [ 1868.207903] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.210171] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.211670] buffer_io_error: 6 callbacks suppressed [ 1868.211681] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1868.230025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.230857] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.232407] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.233904] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1868.240181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.240997] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.242513] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.244007] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1868.245417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.246224] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.247731] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.249235] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1868.250573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.251386] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.252901] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1868.254397] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1868.255741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.256774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.257853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.261029] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1868.262152] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1868.263262] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1868.337941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.338706] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1868.346602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.347364] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1868.347399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.349303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.350059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.350779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.351543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1868.352306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:45:36 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:45:36 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) openat$cgroup_int(r1, &(0x7f0000000200)='memory.swap.max\x00', 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280), 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 00:45:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x808, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 00:45:36 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:36 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1880.439313] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1880.439313] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1880.439313] [ 1880.471196] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1880.478709] EXT4-fs (loop1): get root inode failed [ 1880.479345] EXT4-fs (loop1): mount failed [ 1880.665346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.666514] print_req_error: 22 callbacks suppressed [ 1880.666525] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.667860] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.668810] buffer_io_error: 6 callbacks suppressed [ 1880.668817] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1880.676558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.677059] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.677967] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.678843] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1880.680184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.680635] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.681999] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.682881] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1880.686709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.687242] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.688132] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.688157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.689046] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1880.689485] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.690981] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1880.691007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.691873] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1880.692359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.692976] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1880.693420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1880.694002] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1880.695067] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:45:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) 00:45:49 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="9060d040c7762e3df22b6ad90e73c93787771b1d8e850effa038af6b4d237c69a0511ca658073c4a69f8cf70434f597c6b141cb714") ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000040)="2544531c75c53d8cb7b3a58e6bf11eee2ef6776488070831d2195bbfa3efab69cc984ec5b89f67966dbf1533658914e337e240b8b9fba540a15d501b6df2bf75ab") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x901, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) r1 = dup2(r0, r0) write$bt_hci(r1, &(0x7f0000000140)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"81d6e21971cbd9d8"}}}, 0xc) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000001c0)=r4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000200)=0x3) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000280)="982c0d847c2a77ac380820370ccc94ff7e261c5bd57d9e8fd89472ce14df757e99dbfdf7c4703f0663f7bfbd47733bb05f329331cb230d18d392e1a6cc62816698f374bbcaae8850669054d283f2c2e869cd500f90250bb35072db1755cbcb1ca85584ed1a5285147f3541c948b3bcc7bee4b2") setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00', 0x7}}, 0x0, 0x0, 0x2a, 0x0, "36c7378cbfd5b1db5368fadb9cf909d143676c6b04b7c1751b2f5b6d4b0dd2958421f4f2451b4bfa65592a5ac4b62b5f94c83b07e7b47d50c4fc6fd1328adfbe5a25a685dab8bc75ac7b521a14f6eb12"}, 0xd8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x2010}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000440)={0x3, {0x1c, 0x81, 0x3, 0x0, 0xfffffffffffffff8}}) dup2(r3, 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000480)="448bcd85afcb246db786b1101b9baa4b2b7fc917dcbe92c4af5c9cf6dd97889708412941d680dab78e7a3769cbd2ee8d6c6f2b6d87728b3341832c0b0e3e2f59dc79041f7292743426cad8eb6e6616884c0447eb6d5a7bec42d89822eae7913428c3ccae2bc093c70683f5af279dcb4862d569912c240a6b4d2f343163c0f75ff10a77c4d9aeedea5cec58b674984d832cd70c72253aaf4762d9e9e115cc37e9d33118b70505df40542927645b002ea17d49c9cd84a7bb74068076cef4ac399bfc349737ef51cdfcae400a4dca029daad90037e7721a") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/85, 0x55, 0x1, &(0x7f0000000600)=""/170, 0xaa}, &(0x7f0000000700)=0x40) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000740)={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, {0xa, 0x4e23, 0x400, @private0, 0x3f}, 0x400, [0x0, 0xffff8001, 0x1, 0x4323, 0x6, 0x6, 0x9, 0x4]}, 0x5c) 00:45:49 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:49 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:49 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:49 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xfe}, @BATADV_ATTR_ORIG_INTERVAL={0x0, 0x39, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000894}, 0x8c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) socketpair(0x21, 0x4, 0xfffffff7, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0x1a, @inherit={0x60, 0x0}, @subvolid=0x4}) fallocate(r2, 0x0, 0x1000, 0x4) r3 = syz_io_uring_setup(0x4f60, &(0x7f00000003c0)={0x0, 0xa90d, 0x8}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0), &(0x7f0000000200)=0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x9) 00:45:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa0000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1893.144705] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1893.144705] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1893.144705] 00:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) [ 1893.171675] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1893.179093] EXT4-fs (loop1): get root inode failed [ 1893.179666] EXT4-fs (loop1): mount failed 00:45:49 executing program 0: futex(&(0x7f0000001940)=0x1, 0x2, 0x0, &(0x7f00000019c0)={0x0, 0x3938700}, &(0x7f0000001a00)=0x2, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f0000001540)='./file1\x00', 0x0, 0x0, &(0x7f0000002a40), 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="73623d3078303030303030303030303030303018"]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) socketpair(0x21, 0x4, 0xfffffff7, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000940)={{r2}, 0x0, 0x1a, @inherit={0x60, 0x0}, @subvolid=0x4}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000001b40), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = dup(r6) fcntl$dupfd(r5, 0x0, r6) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fsetxattr$security_capability(r5, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r8}, 0x18, 0x0) sendmsg$unix(r2, &(0x7f0000001400)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000080)="bc8410eddac3b8c039b0d0b35d711981714f1b6ed2a6e75b2773b0ec276f9398c700959fe49ca744c65f", 0x2a}, {&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="270d6430ba972aa2e99a6cfd1305f59e85a11e7fec8d8e3b3d0f847b8eddba4ab7978f6d10415458971e6ae8f6e98cb87e378a530b638f581bc1e79ebf9598a26c2e676402fbdaad504cf06600eb4a33be45fb5ddbe852dc027c497b89a3895de81e92c04f530e4e59d4884f45d755d8d806c911860411c81527707f69d9103189", 0x81}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="b545a239ab973eaaba33d1c2806edf952ee1f9e2a6eac700818f57d59e994fa89a9286fb43c4977f33d019421266122524a461f1f9505aee23e75ef0b3fc4c6ba933b408582db6cee60bfdaf7f391f15c61566b33bc8c112798caad15960fa22bda9b4ca22ebe871bb2bf74a2d9735c4f4b7dc0a18bd33dc359da2e5cc836b51a2ec99530bcc7baa3627edd400980c0b50e4a889f7cc0dd18740e4e6ebbedaff03d187c644149ab4b0aadf58d76144b538b03ff24b2b58a2e90054d97a2919528b7ecca67d4a612649c8d64904f48e725501a3f3f9d14ac5015313655bd952e0d023da7233da0a86a6c9f2ab2009ae92796d06174f62", 0xf6}, {&(0x7f00000012c0)="202d4df210f0b0be42b4884b92d3e8c377f01292bcbfed2ed4d0273d089d9ddd8679a8ad77c0f861b9c450eca00755453a83f6706bb1b193c448401b181686501b752715d1066b615f60e101b2edba9074e4ea6287240e18e66c507881aa0844c63fdcc2d301412833776fbb8ddb631499a34e910f8c8d", 0x77}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="1c0000000000ffff010002000200000020a0406232752de1c60d41f252ec0e0bbb678f056ccd6d2a", @ANYRES32, @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000001a80)={0x0, {}, 0x0, {}, 0x9, 0x1, 0x1d, 0x5, "a31c758203242e2a720204ed322e416604774ea8f288d08f20791fad8268d96bf7a2e1c001628fd07eeff7696c4f95323671f4e09c6c9529e99bc34bdd487d94", "86be68971e61e430d0d548e1fd3af13d61aa91002de49af313e25ee7b759d3db", [0x4, 0x2bfe357e]}) 00:45:49 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:45:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:45:49 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:49 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x40, 0x20, 0x40, 0x0, 0x691bb8a9, 0x4201, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x1e}, 0x210, 0x9, 0x80000000, 0x2, 0x8001, 0x7f, 0x3ff, 0x0, 0x3}, 0x0, 0x10, r0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x26c) r3 = epoll_create1(0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000003100)={{}, "13491ffac638dc9d1c7c35ea7c9ae4ba7ceba3293082dc78b9af57c4173665736aabe9d0b6090f583ea10e06b4238893ff239998876a36cb209be8f7a8d4113a9ee27287ee0f816e7f6f451646002bba8308eba61bd48f5af72383fb013a415711860cbacabcfd153739be2c2ef355741f90e3ac82dc89d7a835b2532da5e18c33a6854a76410e0886d2b688941abb2fce91dc56498dd8a8c7f59ff58ebc2be4de58642c34582104c71e4f56df4dd0b9c8a563a8818f057d359652311e6302caa60e3d732d770cc947206f5bc2308a21545a81cda17fad51097d82d737f44004134f3b7035900ab3a003e69836826b6dff829455721c2f07793420ea325aa008ef79f574296126ae2f672cb40b77e02e7f534c14056b016796e9cda99a95ea1a369c2c3aeeaa83451bbfe9464fefe24f0496e81b83c771434e0e5a4a45b67f80cd7d3bc2bfad0356caba46125e8c6a2d9d1df7556f3de05c077ab84efd23866785511e63eb60ac71f0adf20b890792e9fe52ab25af8cdeaed94e5432463b175e5bb994e50fd3b6fc69d8d9327129491525ccf0cfb39eccdd433f0568eb439a6d27224d5d9795cb315ff675cbc917808b22d897b238c0324408438a0bfb35b6b82b20e9fd2709449e3b6873b90e807667f7f92b309b1c78d800cf461e114fedcd65d70d3492b49146088868005f91c0b404ee07efbc2a04e0feec47e1d1dff6b896713ac16371e5f1ce246def687612d0f2ba367f5a85511b29f35efc4381fcde4b3cd6f1391eb002eda007d23496de7b20d2afd0e57740120ce6f4588747348895898983215b383d20d3190eaeb2bdebab4683c433189ff46b6fb84d9fd3467e77bd18be8e4bdafdd83c6534e8e1dd0253287b4fe6c7d9662148720942ee7bfd95e723612ebfe51d50e8550856cece1681f4521c4f469ed69851cf82068263e7f79753dede350c4b4c88564b6817fd1e7513c9683227efc255e2f277050b6e91112e92616f35d56a7ec770b9ff50a9d5490fcd6bdab0e0edd4edbca05ef00ca90e7c43a272aa24feaab757da38cd7ebc5e422e57c26b5d583ca77ef7bd8b769e0d691b3c47de2fcbfe4e42272fa199bf5ef91abc5068ee1a8720568b526b40b8df302d63f6674e983b984f202ccea35038cd0a7771e76fb97f70783ec7759bf1ca5b43e460ef2ae016f27e2bdbf3b4340a2adffca05063b27240be4c684fbaac64a1bbad265ac6cf5b9723c4c48001c6d1c3d11d2990b371e6a6e600c9d3fb139f7f626af9690df4260a8fc2f9243e7f947d03a628a002332baa329bbed54f9c93bdb611c9529d6891de632d0f70b00104efedc31bbf9114c505d6536eef7e826f9477b4c9de99e07047ee7b7e98f46ce4bd5442ee4ee4afb9d2fab6f416af058fddf5dd3e90ad49c5ae1f2ec9a7053175fe4bf7403e87683eb01f421dd23aa6deab9fc6ec8d9cbc4fb172470e3d179977a51c54fc7a23380f895a3e5de55ac4df48f741c595062982fad9640bc8d237b10b61c87f6e3f4e6781b761701a9b082845029d2c022d7742e870d7d0882aa0e0d14a000f64d029cc5dd4500ad1ac4aa545eb426d854232d6df3027c27b20ad679a2015327775f0c3b9946645c05e4d02a7b50b3cda92a012ee791b97a84e1ce64f4f48e13a7c19db1a6316092eacd4091d01240261de230745b9e14d7cc1fae31782ea29694708d7492b030156ee28be1cad7c0ff6bd6a502b39bf354cf2d1aaebe35d7ca245ba28e351306afa958a54081e8301d36b34970eda5085c32c30f9e1fa4523dc67469a943026b12d8efdc9c9dc2a2c4d8ad3f194fb88591bf0b0b9a713d1eddc50f29e412978527ccf29c70a078c89d2e4a1007f42598f06baa3d3adb3d2f2a582db173f9b38551872e0b4f5add472a46dea05be5cf02eeed6f94a569dc408895b691fc0df2d6247263709fb0d91de3e30cf770f8504f1a3900b44bf013cab5c9fca532c6b82920333ffde94fe177d810fb18912dac135e811971a0d1f26f2ab9412108a2d4191329918772934b0370b1a920c59463f0abd62b7fee919a27566135063c59222310729259c9ec4a845f039a2a0fa0df084021cc0eb903ad70cc268a410372b0392315f91510d55ddc789976bc5b8a54a55a9792a0757ae4723040797dfcaa99926d45fc0eeb0f3c398c045f824fec24096612f93ecb68cf8eabe6150d9c8e86a77d89d6044315cdcb087bdc0398dbca71147e9b3e61c4cf5da6e819d74fa36376f3e0b4981c98af2639fef4889376d65df5b4ae8de00edee13fa0cab9a240179c26995b4a4ea1c8a52a546aa1b9208ee6a79e19edc264f0a0b01773f59d14ee2e94c6870533c01c7d1b28622c52d91774b653be50a3f5d7e85bcd0773340744adcd0f039dd1caa4c291f23d7fa8161fec9bbd379eac22943140835e7f0e1aa5010b70808fdea2b8727b898e93093ed549d51b590c0bdb4f720bae0fc5c346152b1e34f1f68a19b76b29f637a928a53c2abe04d45e0a055371743a3728629cfae78027d8347097cb1a901270edd99abf615e7cf43d7709b1d2cdfc81d425002c3968589edb09a339befa728b27b12871db669a9484c288ed87ff541e6a38abd26a2a7d13dbb059f4ec946a319ab4f4bbcfa9c6f052b7b0eaecfcae58addba5d1e926d5814b1bb2b1a3b9dcefd4096ac5b95b3194f5cb8bb0a66a297e4ec440b5a6a39a2a8a8e4b2d9dcf0a377bf9b2bdee9a4ef3c1d070ef46d548d9d616065e790be45efdbb814d022f3a6d5368f30a339b2ca3b907ae1b2d685894297daaec446eff3dd74f853088244d7acf675e59cf4a1c24dc8ff26d7e3c782eb169b167f58d1509425bfd431782f6c690f37f6973ac37a6a2c87c88d2246b27404bfcbe4f545f9c46f14508d4332d6b0cccc68d96bdbba7c6c61abf217bc518bd46fbbddfe3e0d6ce19c18e00d658269174f4186c6b246757dea713f5e574b39eaa6161a4e16fbfb55a10555621661079e48d513d01bd1d9956a4dc253d0de82e455e872915a5c5db51f3ea66f15c30a889ffaf480c10044ca3db315d89deda7c52801243432145d80b8956b912362d072a8ec1ca254ed89c5f4d98d475e8e1772f6d39b1cf5ee7105a8fa71935c9c16d5cfc54442dba624f0c8a627ca2e9f41fa3709f30ccf676f25ac0433571c30a5d5a0c9193e278ed003c4035f0af984307e4557cfe85c121589cac6f8896aea4719a81362e493b65bd4823d5aed48a69faa8381d2672bfd5886d6d4f1ad451dadf565be949fc8bee486995865957819c792761d799073e4b76798e9d3abb0a6821fc1c4592eb3cfce299593389bee62de9e79a1f36915d2ae16196123dfc1d1dec33d69c2fa9b5cdc9babd81c990688e8306df64e154d9f19e2121bf6c47adebb1b904bfe5a619d34ce503c6b853832055b8a63907a0aafb0defdd9a3bd015068ba4d45b88ddd7a60850f911461d20a065b30cf8ec47492a98e6443a2d3ea783a67bdb2ce378cfa19ec1356c93c79e679d132ed57b29aef57e01be3e2c5982cdfd7a7939ea6251ec427e1b66bd6ef011ceae0fa3353e1d036b4b59ddf50ad7143cca9234073d8992f1d98be344c16074ba87e8fa3202a839113e8535f4d941edc2fda26bb8532678dd26889aa763688b588a32a048492a533dcdaa1daaa6c250f3c7712121a53c1acb68d6fcd9b2d9bbd1d35401c2a7f47f48dfec60c68075871169410dcb7e380fe36dfa6836a9235d59e8e215e07f460cbf0ec381b4e70b754b59847622acfca0b7b8e0533b21606b22ad76d493d67cd7fd1e6314ad008a14a559d112943c07f2d9b503d37fa093a3a0fd06794ce88d8d0018b65f42ac3d9a84e30439faa964d2714db269672b26d5c8f502f432994eab0382bbac6de00846f19cb266d19b2dfba959431bb80b33ff108d8ccc7d1bb829e7cbd4c478f39bf73c5d6fd9d88406a952b8d42e53edec5e3399f443f3561499ed8170a5290e92ddc1a6dc2d17ec64f735aba101e8eedd5191439ce338aeca18d39d79be1c6a7dc5d5551bd682b1262a9f7df3aabd42e9da3549446fb6f2c684a767d85f8378575b565319725b0e1db1b77cb58b4550fa702f597677808b43c07d50ad054c8873f2a3b5c22c126c5d8e6654952cd94683749cbd212d8d60e8731a36461b0e359982573ef319cfc0c36f714651fcc3833e63fc3f7917a3f166f9646fc741df8cbe7fd777893612f2a64747bdaa7fefbb3ab0a16457f59ed49af303a30d2ea10516d89ecda4e89a4c6c9b801759640fe1005e0fa7c5ca078c963bdb86f37eebdd01cfa3e4e9059a54c1b08ae0ed2ae1a993f1ba49565c1111aeaf9f96e3016d0b6182da1ec6e7ccc307b35b22ee047cc7763fe0f08c5746c6d1d2f8f3e9dd6b6bacdacc0a8d87558a9b0c96ef04372d0c8c3c63d50851049fc49165e95bf8a594672694d78d5bad3085c86e335b1d20f3fd01d33f5d4b74f3373ef04ca2ba64873ecd7dd1c53ecaa6f410e6f5fb4478a513dc7ce6561a653ccf9b5c10624fc3ab97774c1dde42c2b97bb3ebf1231fcde7f16b65ab40b5b1b4401c4f5db7188d490a4fdd3d4d3485ebf14a575ed80deaf2ea1868b99d69a568ff65561b3f6f66fb20860a25da8a929b8552abe3f638500170398615a238cf172469a9f32bf67489f5a5a7d0ba5a061f7f6ff0ef5a632f8f70a2bcaa6e25fe27e1c1d931302fd71f3428e4ce7340f575f42fed42004a2c83d13a87dd12f9710b6e0b3606cf4bf4750e67cca3676de274b27b3c3c0f91d89f6acd5858c6fa930db482d86bb37d2ab903b899c3aed0d50b49175a4a17afe691f2aab0992b70b1b1ca7349dee8742bb3c1ceb8bf6c6537d9fa7cea914e8b9941e8c0010ab4fded94bfd7be60b417bef67ae92188bce8cb8b675f195fcb2f82bd85ccc0808d8545994e232bb450b688154347be7f1d9bb3df660788f4e90c6977c9399943a4cdcfc9ac6eaaf46414866ef58dde2ad5afd602e765b9fb4818a5ea6fbd333b5357eb7b0eaf88f20f047de993c778792f6209928695bffbffff79a2fde1e520f85e4b6d08e3dfb82139ffee0f482a45d07128a47f298f83b12fdb01dfd58d4cb412259078f7c2ea70a15f336c60082cb5bd45ed96fe129f7acf3d04d31e0f926d6eea88b09df22fbafb7eda5f0eb2416e614f54ce4f63b5869516cebacdf1e02fcff273bad8ae4d4b84ab5824ccb97770f843b965259637e3553b91f3b2bf4506b33c19bce360c46eb9f7461ca4da8e821a7878a146b6b297d1143b22dece39e9b188802ccd48655870c3f9d41aa44ddc2ac5cb51ac6676d171aa752726870bba929efb0e66442bbf5d93a835371b6e827f64c3ea9354a648ecc9aa3b627424354aec959e43862c3b0bb43d61abcb018e1601672efa90bc01dcec6f44f962c93ee11659aec5f377147d3883e2cb2f22557e4a4cb75042a7c61c2cd9f66801c7bf85ea1819d544bee3281afb87da0b67c746adaae314ebc922c0b2df7ce275aa6584d46a4740e14e85ef4922ba8afeb9fc638e69e8a17d5c92da7aef8d1bb910675c992126977093e56db45af7af8c75312535e693982aae8768088c82ac99dc70e1f3b1c4ab3c6583e7ca49f9c05616a2f937ee94f92f706647495203750da18925183d0b79b26a3fc29a27f3cca27d1abeccc1a7770760153f02c69484b3dfce9dec803eab7b4eeafd357c43efd5e370f26c8977e8f792b7589f7c784641d05c7004249ba8f418be07d334836cfb211d00d643f4a793415bcdb93a0a323"}) pread64(r4, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) splice(r3, &(0x7f0000000080)=0x5cda, r4, &(0x7f0000000180)=0x53, 0x6, 0xe) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) poll(&(0x7f0000000200)=[{r4, 0x8100}, {r5, 0x4040}], 0x2, 0x3) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, r6, 0x2) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 00:45:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe0000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:45:49 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:45:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) [ 1893.439039] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1893.439039] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1893.439039] [ 1893.485380] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1893.488011] EXT4-fs (loop1): get root inode failed [ 1893.488471] EXT4-fs (loop1): mount failed [ 1893.850366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.851355] print_req_error: 6 callbacks suppressed [ 1893.851373] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.853925] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.853989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.854931] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1893.856999] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.858691] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.858754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.859646] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1893.861730] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.863430] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.863605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.864348] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1893.866945] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.868646] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.868713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.869604] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1893.871666] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.873359] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.873424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.874279] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1893.876557] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1893.876651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.878189] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1893.878250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.879760] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1893.915307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.916223] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1893.916284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.917849] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1893.917912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.919420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.920367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.921323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.922265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1893.923209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:46:06 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b0"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:06 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:46:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:46:06 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x40, 0x20, 0x40, 0x0, 0x691bb8a9, 0x4201, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x1e}, 0x210, 0x9, 0x80000000, 0x2, 0x8001, 0x7f, 0x3ff, 0x0, 0x3}, 0x0, 0x10, r0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x26c) r3 = epoll_create1(0x80000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000003100)={{}, "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"}) pread64(r4, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) splice(r3, &(0x7f0000000080)=0x5cda, r4, &(0x7f0000000180)=0x53, 0x6, 0xe) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) poll(&(0x7f0000000200)=[{r4, 0x8100}, {r5, 0x4040}], 0x2, 0x3) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, r6, 0x2) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 00:46:06 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) chown(&(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') openat(r1, &(0x7f00000001c0)='./file1\x00', 0x10000, 0x101) 00:46:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:06 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b0"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1909.877365] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1909.877365] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1909.877365] [ 1909.953414] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1909.963664] EXT4-fs (loop1): get root inode failed [ 1909.965154] EXT4-fs (loop1): mount failed [ 1910.230974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.231899] print_req_error: 22 callbacks suppressed [ 1910.231917] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.234370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.235219] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.236899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.237724] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.239377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.240222] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.241895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.242710] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.246680] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.248302] buffer_io_error: 6 callbacks suppressed [ 1910.248313] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1910.250254] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.251842] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1910.253018] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.254603] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1910.255773] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.257376] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1910.258540] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1910.260132] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1910.261409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.262352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.263289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1910.272857] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1910.274049] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1910.275222] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:46:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:46:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="500100001000010000000000001d0000ac1e0001000000000000000000000000fe800000000000000000ebc0f58279ae12f600"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x150}}, 0x0) 00:46:19 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:19 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:46:19 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b0"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffb}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r1, 0x21, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10200, &(0x7f0000000b00)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d000000000000000068653d6c6f6f736c2c613aecb9d913cebd2aa15069b3f4b73d2b2c2c736d61636b66736465663d706970656673002c7050303034352c7569643e000000000000a9a8142492812b665fc827946b0000f0fceb805d45fa1322c8425193c6b8ec9703a6210d1635b92c729668e9b3b752defb8a2e829f5b2068dfabf4dbd3d9834207fe58a16a3c976e71adf6712f0dadd2788f", @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d654d70501203bc5565ce8f4cafa423b2ead6ba714bc28fdb8259de7b2d04025c7976bbf3ff1732fe22c93a75d6046ed66ad2d9e306991600b5cb0e10de1b559b430a2db95148f44f1d331d800a5fe4bb20f79a06ddc1120b0586c8acbe3bfdeb2e9b3b06b8d9dbae77081a0e01feb410594851956dd516f61f5c56bd4b6ade41453e19ed1db53a4d29edb9e8bf94c8990d954811"]) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000480), 0x4) perf_event_open(&(0x7f0000000500)={0x4, 0xffffffffffffff1a, 0x5, 0x0, 0x7f, 0x3, 0x0, 0x9, 0x43083, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f00000004c0), 0xe}, 0x8, 0x6, 0x1f, 0x0, 0x3, 0x8, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2) mount$9p_unix(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x240000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000b40)='./file0/../file0\x00', 0x42) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)={0x7, 'vlan1\x00', {0x5}, 0x81}) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x14, 0x0) 00:46:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 1923.235587] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1923.235587] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1923.235587] [ 1923.262744] EXT4-fs (sda): re-mounted. Opts: (null) [ 1923.268344] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1923.271080] EXT4-fs (loop1): get root inode failed [ 1923.271573] EXT4-fs (loop1): mount failed 00:46:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) mbind(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x1f3, 0x4, 0x7) r0 = clone3(&(0x7f0000000340)={0x4100000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0xc}, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=""/116, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa}, 0x58) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x6, 0x7, 0x6, 0x0, 0x5, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x40000, 0x7, 0x1, 0x9, 0x4f, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, r0, 0xf, r2, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 00:46:19 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1010000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1923.369360] EXT4-fs (sda): re-mounted. Opts: (null) 00:46:19 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:46:20 executing program 2: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 1) 00:46:20 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1923.568382] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1923.568382] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1923.568382] [ 1923.583693] FAULT_INJECTION: forcing a failure. [ 1923.583693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1923.585750] CPU: 1 PID: 11339 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1923.586842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1923.588042] Call Trace: [ 1923.588464] dump_stack+0x107/0x167 [ 1923.589048] should_fail.cold+0x5/0xa [ 1923.589654] _copy_from_user+0x2e/0x1b0 [ 1923.590286] __ext4_ioctl+0x2766/0x4190 [ 1923.590927] ? ext4_reset_inode_seed+0x450/0x450 [ 1923.591672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1923.592495] ? find_held_lock+0x2c/0x110 [ 1923.593156] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1923.594051] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1923.594863] ? do_vfs_ioctl+0x283/0x10d0 [ 1923.595500] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1923.596328] ? generic_block_fiemap+0x60/0x60 [ 1923.596545] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1923.597052] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1923.597084] ? selinux_file_ioctl+0xb6/0x270 [ 1923.598564] EXT4-fs (loop1): get root inode failed [ 1923.598787] ? __ext4_ioctl+0x4190/0x4190 [ 1923.598807] __x64_sys_ioctl+0x19a/0x210 [ 1923.598828] do_syscall_64+0x33/0x40 [ 1923.599232] EXT4-fs (loop1): mount failed [ 1923.599962] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1923.599975] RIP: 0033:0x7fcf117eeb19 [ 1923.599997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1923.606390] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1923.607578] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1923.608695] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1923.609831] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1923.610958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1923.612071] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:46:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:20 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="de0594bb154aff396f459615b805e2fdee45824039333dc5c4d6fc37f1b458ab", 0x20, 0xffff}, {&(0x7f0000000100), 0x0, 0x8}, {&(0x7f0000000180), 0x0, 0x800000}], 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=0x0000000000000064,gid=', @ANYRESHEX, @ANYBLOB="2c6f38ee76657272692465726f636b7065726d2c66736d616769633d3078303030303030303030304d30630400000000000000566166665f752c726f6f74636f6e746578743dde736572855a7d5de56eb7c1c822c89bf5b6045aaa", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) [ 1923.646231] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 1923.646231] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1923.646231] 00:46:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1923.704929] EXT4-fs error (device loop2): ext4_fill_super:4962: inode #2: comm syz-executor.2: iget: special inode unallocated [ 1923.715304] EXT4-fs (loop2): get root inode failed [ 1923.716320] EXT4-fs (loop2): mount failed [ 1923.772167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.772685] print_req_error: 6 callbacks suppressed [ 1923.772696] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.774072] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.774961] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1923.781040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.781510] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.782427] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.783304] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1923.784474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.785453] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.786368] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.787247] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1923.788935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.789393] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.790304] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.791178] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1923.795227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.795684] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.796570] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1923.797471] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1923.801680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.802193] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1923.803465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.803968] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1923.804987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1923.805461] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:46:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280), 0x4010444, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x9}}]}}) chdir(&(0x7f0000000300)='./file2\x00') futimesat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10001, 0x0) stat(&(0x7f0000000400)='./file1\x00', 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) r2 = eventfd2(0x3, 0x800) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000500)="8708a720748e7755e19e398fa9476e9ddc5419a8626eec755ecd1d72e5c922b71a58c3eeca75609bf39b05d69c23c65f8dc9243334c3273ea20ac6012d31ac9579db4f6abe13264c7d111362ac96dbcd618b75d1819c6163c4830b2fa64cfcb932104ac681a5250f90dd34d5d68228c5666f177e1648143ed89f6a8470eb213b19b8eef02ba7ac9198bb", 0x8a, 0x8, 0x0, 0x2, r2}]) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') 00:46:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2820000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400040076657468305f766c616e001f00000000080005000c000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001e00)={0xd94, r1, 0x310, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x6ec, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2b91c1e7}]}, {0x688, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x45c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x2]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x24, 0x6c, 0x6c, 0x12, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb808, 0x31e, 0x4, 0x4, 0x7, 0x9, 0xf4c5]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x2, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x1}, {0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x1}, {0x2, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x4, 0x9}, {}, {0x7, 0x4}, {0x6}, {0x2}, {0x6, 0x8}, {0x4, 0x6}, {0x4, 0x9}, {0x2, 0x3}, {0x5, 0x4}, {0x5, 0x8}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x3, 0x9, 0x36, 0x6, 0x18, 0x50, 0x12, 0x1, 0x6, 0x3, 0x36, 0x2, 0xc, 0x1b, 0x6c, 0x1, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x3, 0xfffc, 0x81, 0x9, 0x400, 0x9, 0x81]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0xa, 0x36, 0x60, 0x60, 0x6c, 0x0, 0x48, 0x48, 0x3, 0x28f1682234e1f155, 0x6c, 0x18, 0x5, 0x1b, 0x4, 0x6c, 0x30, 0xc, 0x6, 0x1b, 0x2, 0x9, 0x48, 0x1b, 0x48, 0xc, 0x29]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffb, 0x9, 0x6, 0x2, 0x400, 0x1f, 0x12]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0xb, 0x48, 0x9, 0x6c, 0x30, 0xc, 0x42, 0xb, 0x48, 0x1, 0x30, 0x3, 0x12, 0x6, 0x9, 0x12, 0x4, 0x1b, 0xb, 0x60, 0x60, 0x36, 0x3, 0x6, 0x24, 0x5, 0x30, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x1000, 0x5, 0x8000, 0x0, 0x0, 0xd04b]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x6, 0x13}, {0x5, 0x5}, {0x6, 0x4}, {0x4}, {0x2}, {0x6, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0xa}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x13}, {0x7, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x800, 0x1, 0x8, 0x7, 0x8001, 0x5, 0x400]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0xa}, {0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x9}, {0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x2}, {}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0x9}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x6}, {0x5, 0x5}, {0x3, 0x2}, {0x3, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xbe, 0x7ff, 0x80, 0x8001, 0x4739, 0xb50, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x12, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x5, 0x0, 0x1, 0x6, 0xf4e1, 0xff]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x1b, 0xc, 0x1b, 0x1b, 0x9, 0x1]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0xa}, {0x5, 0x5}, {}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x6, 0xe4, 0x4, 0x1, 0x0, 0xfff, 0x200]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x5}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x2}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x0, 0x60, 0x3, 0x5, 0x9, 0x1b, 0xb, 0x6, 0x16, 0x1, 0x18, 0x5, 0x60, 0x48]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x24, 0x16]}]}, @NL80211_BAND_5GHZ={0x15c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x101, 0x101, 0x1, 0x96, 0x0, 0x3f, 0x6]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x2}, {}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {0x2, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0xa}, {0x0, 0x9}, {}, {0x5, 0x2}, {}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x2}, {0x7, 0x2}, {0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x2}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x3}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x2}, {0x2, 0x9}, {0x4, 0x1}, {0x1}, {0x3, 0xa}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x6}, {0x1, 0x6}, {0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x4}, {0x1, 0x9}, {0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x8}, {0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x2}, {0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x4, 0x5}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x1}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x5}, {0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x4, 0x1}, {0x6}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0xa}, {0x5, 0x6}, {0x3}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x5}, {0x7}, {0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x7, 0x3}, {0x6, 0xa}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x8}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x1}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x3}, {0x4, 0x4}, {}, {0x7, 0x7}, {0x7, 0x1}, {0x0, 0x3}, {0x1}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x2, 0x4, 0x3, 0x8000, 0x84, 0x5]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x619f, 0x0, 0x1f, 0x6, 0x1, 0x81, 0x5, 0xff49]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x30, 0x3, 0x1, 0x6, 0x6, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x1, 0x4, 0x48, 0x5, 0x16, 0x1b, 0x1, 0x9, 0x5]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6}, {0x2}, {0x3, 0x3}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x9}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x7}, {0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x17}, {0x3, 0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0x9}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2}, {}, {0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x1}, {0x1}, {0x7, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x5}, {0x3, 0x8}, {0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0x3}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x4}, {}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3f, 0x7, 0x1, 0x1, 0x7, 0x1ff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x7ff, 0x80, 0x7ca, 0xbd, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x0, 0x7, 0x6, 0x1, 0x3ff, 0x1c8]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x18, 0x16, 0x0, 0x1b, 0x9dd01c45ec79c829, 0x30, 0x6, 0x0, 0x5, 0x3, 0x6c, 0xb, 0x48, 0x36, 0x5, 0x2, 0x24, 0x36, 0x4, 0x3, 0x18, 0x0]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x9}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x3}, {0x7, 0x6}, {0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x1}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x9}, {0x5, 0x1}, {0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x9}, {0x2}, {0x3, 0x5}, {0x6}, {0x6, 0x1}, {0x6, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x9}, {0x2, 0x8}, {0x2}, {0x6, 0xa}, {0x5, 0x4}, {0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x6}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x7}, {0x2, 0x7}, {0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b47, 0x7, 0x1ff, 0x5, 0x5, 0x401, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x80, 0xfffd, 0x71, 0x1, 0x5b89]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x9, 0x4, 0x1, 0x4, 0x7, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x6, 0x9, 0x4, 0x5, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x18, 0x9, 0x6c, 0x5, 0x1, 0x0, 0xc, 0x36, 0x16, 0x2, 0x1b, 0x6, 0x6c, 0x4, 0x1aed7ecb3754d282, 0x1b, 0x48, 0x4, 0x60, 0x12, 0x5, 0x6, 0x36, 0x60, 0x6c, 0x6c, 0x1, 0xc, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x7ff, 0x8, 0x1, 0x0, 0x6, 0x4]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x3}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x6}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x7}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x3, 0x24, 0xb, 0x24, 0x16, 0x6, 0x13, 0xc, 0x18, 0x24, 0x0, 0x12, 0x0, 0x3, 0x9, 0x60, 0x24, 0x3, 0x1, 0x24, 0xc, 0x1b]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x5, 0x30, 0x36, 0x18, 0x30, 0x9, 0x6, 0x62, 0x36, 0x1b, 0x4, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x800, 0x6, 0x53f, 0x400, 0x4, 0x1, 0x1f]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x3c80, 0xfff9, 0x1, 0xddde, 0x401]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe6}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x460, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x2}, {0x6, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x24, 0x48, 0x1, 0x0, 0x1b, 0x1, 0x5, 0x30, 0x24, 0x30, 0x9, 0x2, 0x60, 0x3a, 0x6c, 0x24, 0x4, 0x36, 0x4, 0x36, 0x0, 0x60, 0x4, 0x60, 0x2, 0x12, 0x60]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xff80, 0x93, 0x3, 0x313d, 0x6, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x36, 0x1b, 0x24, 0x6, 0x4, 0x30, 0x3, 0x1b, 0x16, 0x12, 0x9, 0xb, 0x48, 0x16, 0x2, 0x48, 0x1b, 0x18, 0x0, 0xc, 0x5, 0x0, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x3}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xfff, 0x9, 0x40, 0xcf, 0x4, 0x20, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0xa}, {0x6, 0x2}, {0x1, 0x2}, {0x2}, {0x2, 0x3}, {0x4, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x6, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x2}, {0x6, 0x6}, {}, {0x1, 0x6}, {0x2, 0x9}, {0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x2}, {0x7, 0x8}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x6}, {0x5, 0x2}, {0x4, 0xa}, {0x4}, {0x0, 0x7}, {0x1, 0xf}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x4}, {0x1}, {0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x6c, 0x12, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x6, 0x62, 0x7, 0x7ff8, 0x2, 0xfffe]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3c, 0xb, 0xb, 0x6c, 0x24, 0x18, 0x9, 0x43, 0x5, 0x16, 0x6, 0x12, 0x4]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x6, 0x2}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x7, 0x2}, {0x6}, {0x5, 0x8}, {0x0, 0x8}, {0x6}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x5, 0x1}, {0x1, 0x2}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x30, 0x3, 0x33d86151b074c59a, 0x30, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xc20, 0x800, 0xfff9, 0xfec2, 0xe6e, 0x8000, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x10, 0x30, 0x4, 0xc, 0x36, 0x7, 0x6c, 0x12, 0x36, 0x2, 0x60, 0x24, 0x9, 0x6c, 0x9, 0xc924a2bb23a79359, 0x6c, 0x24, 0x3, 0x1, 0x9, 0x6, 0x5]}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x1}, {0x7, 0x6}, {0x0, 0x4}, {0x7, 0x4}, {0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x8}, {0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x2}, {0x3, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x5}, {0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x3}, {0x7}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x1, 0x2}, {0x1}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {}, {0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x4, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x3}, {0x3, 0x4}, {0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x5}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x1}, {0x2}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x2, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x3}, {0x4}, {0x6, 0x1}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5e84}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x4, 0x16, 0xc, 0x12, 0x24, 0x36, 0x6c, 0xb, 0x36, 0x60, 0x16, 0xb, 0xb, 0x32, 0x18, 0x1b, 0x9, 0x12, 0x6, 0x30, 0x6c, 0x60, 0x48, 0x6, 0x24, 0x1b, 0x6c, 0x48, 0x4, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0xa097, 0xffc1, 0x9, 0x1ad5, 0x8000, 0x3ab]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x16, 0x5, 0x1b, 0x24]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x5}, {0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x15}, {0x1, 0x5}, {0x4, 0x5}, {}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x5}, {0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x7}, {0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x30, 0xb, 0x30, 0x30, 0x6, 0x3, 0xc, 0x4, 0x6c, 0x5, 0x30, 0x1, 0x6, 0x1, 0x16, 0x22, 0x24, 0xc, 0x5, 0x30, 0x4, 0xb, 0x5, 0x5, 0x18, 0x24, 0x48, 0x1, 0x36, 0x30, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x4}, {0x6, 0x8}, {0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x5}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x3}, {0x7}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0x6}, {}, {0x2, 0x3}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0xa}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x9}, {0x3}, {0x4, 0xa}, {}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0xa}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x6}, {0x1}, {0x4, 0x3}, {0x4, 0x5}, {0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x7, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x79}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}]}]}]}, 0xd94}, 0x1, 0x0, 0x0, 0x48001}, 0x861) openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lseek(r3, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) shutdown(r5, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f0000000240)=0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 00:46:33 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:46:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 2) 00:46:33 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:33 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1936.548223] FAULT_INJECTION: forcing a failure. [ 1936.548223] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.551038] CPU: 1 PID: 11369 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1936.552141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.553441] Call Trace: [ 1936.553879] dump_stack+0x107/0x167 [ 1936.554456] should_fail.cold+0x5/0xa [ 1936.555058] ? ext4_find_extent+0xa3d/0xd30 [ 1936.555739] should_failslab+0x5/0x20 [ 1936.556350] __kmalloc+0x72/0x390 [ 1936.556904] ext4_find_extent+0xa3d/0xd30 [ 1936.557568] ext4_move_extents+0xb51/0x3050 [ 1936.558274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.559095] ? find_held_lock+0x2c/0x110 [ 1936.559747] ? lock_acquire+0x197/0x470 [ 1936.560383] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1936.561209] ? lock_release+0x680/0x680 [ 1936.561840] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1936.562692] ? __fget_files+0x296/0x4c0 [ 1936.563337] __ext4_ioctl+0x302e/0x4190 [ 1936.563990] ? ext4_reset_inode_seed+0x450/0x450 [ 1936.564723] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.565537] ? find_held_lock+0x2c/0x110 [ 1936.566197] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1936.567090] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1936.567901] ? do_vfs_ioctl+0x283/0x10d0 [ 1936.568537] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1936.569380] ? generic_block_fiemap+0x60/0x60 [ 1936.570081] ? __entry_text_end+0x4e3d/0x102932 [ 1936.570815] ? selinux_file_ioctl+0x5d/0x270 [ 1936.571511] ? selinux_file_ioctl+0xb6/0x270 [ 1936.572213] ? __ext4_ioctl+0x4190/0x4190 [ 1936.572866] __x64_sys_ioctl+0x19a/0x210 [ 1936.573517] do_syscall_64+0x33/0x40 [ 1936.574108] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1936.574913] RIP: 0033:0x7fcf117eeb19 [ 1936.575494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.578372] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1936.579558] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1936.580656] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1936.581771] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1936.582887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.583985] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 1936.588420] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1936.588420] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1936.588420] [ 1936.622636] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1936.650075] EXT4-fs (loop1): get root inode failed [ 1936.650641] EXT4-fs (loop1): mount failed [ 1936.657446] 9pnet: Could not find request transport: rdma 00:46:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:33 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 3) [ 1936.750065] 9pnet: Could not find request transport: rdma 00:46:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa95}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x74, 0x0, 0x171, 0x0, 0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x7fa, 0x2, {0x0, 0x3, 0x6, 0x1, 0xd53}, 0x400}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xff, 0x4e, 0x2, 0x8, 0x0, 0xffffffffffff0000, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x40004, 0x8, 0x5, 0x3, 0x1, 0x40, 0xfffc, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) [ 1936.882273] FAULT_INJECTION: forcing a failure. [ 1936.882273] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.883326] CPU: 0 PID: 11397 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1936.883913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.884593] Call Trace: [ 1936.884830] dump_stack+0x107/0x167 [ 1936.885169] should_fail.cold+0x5/0xa [ 1936.885513] ? create_object.isra.0+0x3a/0xa20 [ 1936.885930] should_failslab+0x5/0x20 [ 1936.886263] kmem_cache_alloc+0x5b/0x310 [ 1936.886607] ? lock_release+0x680/0x680 [ 1936.886942] ? mark_lock+0xf5/0x2df0 [ 1936.887264] create_object.isra.0+0x3a/0xa20 [ 1936.887636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1936.888071] __kmalloc+0x16e/0x390 [ 1936.888378] ext4_find_extent+0xa3d/0xd30 [ 1936.888733] ext4_move_extents+0xb51/0x3050 [ 1936.889113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.889556] ? find_held_lock+0x2c/0x110 [ 1936.889903] ? lock_acquire+0x197/0x470 [ 1936.890241] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1936.890678] ? lock_release+0x680/0x680 [ 1936.891019] ? __fget_files+0x296/0x4c0 [ 1936.891364] __ext4_ioctl+0x302e/0x4190 [ 1936.891707] ? ext4_reset_inode_seed+0x450/0x450 [ 1936.892102] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.892541] ? find_held_lock+0x2c/0x110 [ 1936.892892] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1936.893372] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1936.893804] ? do_vfs_ioctl+0x283/0x10d0 [ 1936.894139] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1936.894575] ? generic_block_fiemap+0x60/0x60 [ 1936.894950] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1936.895362] ? selinux_file_ioctl+0xb6/0x270 [ 1936.895734] ? __ext4_ioctl+0x4190/0x4190 [ 1936.896083] __x64_sys_ioctl+0x19a/0x210 [ 1936.896426] do_syscall_64+0x33/0x40 [ 1936.896737] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1936.897174] RIP: 0033:0x7fcf117eeb19 [ 1936.897489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.899006] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1936.899634] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1936.900222] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1936.900807] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1936.901396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.901992] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 1937.088966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.089852] print_req_error: 6 callbacks suppressed [ 1937.089870] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.092221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.093044] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.094667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.095488] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.097090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.097917] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.099526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.100344] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.103195] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.104785] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1937.105945] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.107470] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1937.108596] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.110119] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1937.111246] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.112782] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1937.113909] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1937.115417] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1937.116640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.117583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.118488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1937.122988] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1937.124133] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1937.125274] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:46:49 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3820000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:49 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="24b7a29f", @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf2514000000080011000900000005000c0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0xb3}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:49 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r0, 0x12e, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c051}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}}, 0x0) 00:46:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 4) 00:46:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1953.083381] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1953.083381] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1953.083381] [ 1953.108038] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1953.113456] EXT4-fs (loop1): get root inode failed [ 1953.114235] EXT4-fs (loop1): mount failed [ 1953.128674] FAULT_INJECTION: forcing a failure. [ 1953.128674] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.131018] CPU: 0 PID: 11415 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1953.132066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.133317] Call Trace: [ 1953.133733] dump_stack+0x107/0x167 [ 1953.134298] should_fail.cold+0x5/0xa [ 1953.134883] ? jbd2__journal_start+0x190/0x7e0 [ 1953.135579] should_failslab+0x5/0x20 [ 1953.136156] kmem_cache_alloc+0x5b/0x310 [ 1953.136778] jbd2__journal_start+0x190/0x7e0 [ 1953.137481] __ext4_journal_start_sb+0x214/0x390 [ 1953.138204] ext4_move_extents+0x10bb/0x3050 [ 1953.138896] ? find_held_lock+0x2c/0x110 [ 1953.139521] ? lock_acquire+0x197/0x470 [ 1953.140123] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1953.140914] ? lock_release+0x680/0x680 [ 1953.141555] ? __fget_files+0x296/0x4c0 [ 1953.142177] __ext4_ioctl+0x302e/0x4190 [ 1953.142796] ? ext4_reset_inode_seed+0x450/0x450 [ 1953.143506] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1953.144302] ? find_held_lock+0x2c/0x110 [ 1953.145116] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1953.146240] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1953.147083] ? do_vfs_ioctl+0x283/0x10d0 [ 1953.147883] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1953.148677] ? generic_block_fiemap+0x60/0x60 [ 1953.149569] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1953.150322] ? selinux_file_ioctl+0xb6/0x270 [ 1953.151187] ? __ext4_ioctl+0x4190/0x4190 [ 1953.151864] __x64_sys_ioctl+0x19a/0x210 [ 1953.152662] do_syscall_64+0x33/0x40 [ 1953.153234] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1953.154238] RIP: 0033:0x7fcf117eeb19 [ 1953.154839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.158371] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1953.159589] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1953.160647] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1953.161731] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.162791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1953.163845] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:46:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:49 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x12e3, 0x0, 0x4, 0x2e}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0xc) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x152) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f00000000c0)="fe", 0x1, 0x7c80) fadvise64(r5, 0x0, 0x7c80, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$int_out(r6, 0x0, &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 5) 00:46:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:46:49 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:46:49 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a33935"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:46:49 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a33935"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:46:49 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b0"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1953.510321] FAULT_INJECTION: forcing a failure. [ 1953.510321] name failslab, interval 1, probability 0, space 0, times 0 [ 1953.512351] CPU: 1 PID: 11445 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1953.512902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.513555] Call Trace: [ 1953.513778] dump_stack+0x107/0x167 [ 1953.514084] should_fail.cold+0x5/0xa [ 1953.514406] ? create_object.isra.0+0x3a/0xa20 [ 1953.514787] should_failslab+0x5/0x20 [ 1953.515090] kmem_cache_alloc+0x5b/0x310 [ 1953.515413] create_object.isra.0+0x3a/0xa20 [ 1953.515758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1953.516166] kmem_cache_alloc+0x159/0x310 [ 1953.516496] jbd2__journal_start+0x190/0x7e0 [ 1953.516846] __ext4_journal_start_sb+0x214/0x390 [ 1953.517227] ext4_move_extents+0x10bb/0x3050 [ 1953.517601] ? find_held_lock+0x2c/0x110 [ 1953.517926] ? lock_acquire+0x197/0x470 [ 1953.518239] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1953.518647] ? lock_release+0x680/0x680 [ 1953.518966] ? __fget_files+0x296/0x4c0 [ 1953.519290] __ext4_ioctl+0x302e/0x4190 [ 1953.519614] ? ext4_reset_inode_seed+0x450/0x450 [ 1953.519998] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1953.520410] ? find_held_lock+0x2c/0x110 [ 1953.520741] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1953.521205] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1953.521628] ? do_vfs_ioctl+0x283/0x10d0 [ 1953.521958] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1953.522374] ? generic_block_fiemap+0x60/0x60 [ 1953.522731] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1953.523119] ? selinux_file_ioctl+0xb6/0x270 [ 1953.523467] ? __ext4_ioctl+0x4190/0x4190 [ 1953.523796] __x64_sys_ioctl+0x19a/0x210 [ 1953.524116] do_syscall_64+0x33/0x40 [ 1953.524409] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1953.524815] RIP: 0033:0x7fcf117eeb19 [ 1953.525118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.526558] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1953.527168] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1953.527718] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1953.528268] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.528821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1953.529387] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:46:50 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 1953.818925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.819390] print_req_error: 6 callbacks suppressed [ 1953.819400] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.820611] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.821444] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1953.830673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.831133] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.832269] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.833086] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1953.836693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.837151] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.838141] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.838951] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1953.842850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.843275] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.844122] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.844935] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1953.845609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.846057] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.847377] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1953.848197] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1953.848947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.849403] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1953.850080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.850521] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1953.851203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.851651] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1953.890042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.890538] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1953.891258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.891777] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1953.899215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.899699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.900205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.900677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.901176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1953.901644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:47:03 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(r0, &(0x7f0000000180)='./file1\x00', 0x0, 0x8, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x100c5, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030309c3a3bd00efe6967bfe7c3e9303030303030303030346532302c756e616d653d7b2c76657273696f6e3d3970323030302c6f626a5f747970653d7b7b5e242c736d61636b66736465663d282d275b262f2c2f2c6f626a5f747970653d706f72742c686173682c7065726d69745f646972656374696f2c61707072616973652c61707072616973652c6f626a5f747970653d40265b262c00"]) open$dir(0x0, 0x48000, 0x3) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x20, 0x400000) fremovexattr(r2, &(0x7f0000000380)=@known='trusted.overlay.impure\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0/file0\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000001000000000000008d7b81266a1742baea1747586d6bb101b773e7f0d561bbae59867a5c7f34ca1a56e8c4c7e77b5f9c4c4713dedec368f0cf105adb29f874ca1e25db6210d116581038dfc1516a74324c41a5ba04bce2cf8e53f2abd39a34d6c6dbcb338625d9f68d52446aa2c3259f4b9f1d537b14430a06be2787a7733ba9", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) accept$unix(r3, &(0x7f0000000580), &(0x7f0000000600)=0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 00:47:03 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b0"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:03 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:47:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 6) 00:47:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2046034, &(0x7f0000000000)) 00:47:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:47:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6050000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:03 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a33935"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1966.758159] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1966.772807] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1966.788836] FAULT_INJECTION: forcing a failure. [ 1966.788836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1966.791835] CPU: 0 PID: 11461 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1966.792937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.792989] Call Trace: [ 1966.793015] dump_stack+0x107/0x167 [ 1966.795070] should_fail.cold+0x5/0xa [ 1966.795705] __alloc_pages_nodemask+0x182/0x600 [ 1966.796468] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1966.797445] ? find_get_entry+0x2c8/0x740 [ 1966.798137] ? mark_held_locks+0x9e/0xe0 [ 1966.798802] ? __jbd2_journal_unfile_buffer+0xb0/0xb0 [ 1966.799642] alloc_pages_current+0x187/0x280 [ 1966.800360] __page_cache_alloc+0x2d2/0x360 [ 1966.801068] pagecache_get_page+0x2c7/0xc80 [ 1966.801789] grab_cache_page_write_begin+0x64/0xa0 [ 1966.802541] ext4_move_extents+0x1203/0x3050 [ 1966.803287] ? find_held_lock+0x2c/0x110 [ 1966.803959] ? lock_acquire+0x197/0x470 [ 1966.804607] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1966.805454] ? lock_release+0x680/0x680 [ 1966.806135] ? __fget_files+0x296/0x4c0 [ 1966.806813] __ext4_ioctl+0x302e/0x4190 [ 1966.807476] ? ext4_reset_inode_seed+0x450/0x450 [ 1966.808236] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.809086] ? find_held_lock+0x2c/0x110 [ 1966.809781] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1966.810707] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1966.811538] ? do_vfs_ioctl+0x283/0x10d0 [ 1966.812198] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1966.813044] ? generic_block_fiemap+0x60/0x60 [ 1966.813802] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.814607] ? selinux_file_ioctl+0xb6/0x270 [ 1966.815318] ? __ext4_ioctl+0x4190/0x4190 [ 1966.815994] __x64_sys_ioctl+0x19a/0x210 [ 1966.816655] do_syscall_64+0x33/0x40 [ 1966.817275] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1966.818075] RIP: 0033:0x7fcf117eeb19 [ 1966.818645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.821380] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1966.822538] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1966.823612] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1966.824685] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.825775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.826844] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 1966.841698] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1966.841698] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1966.841698] [ 1966.869415] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1966.906201] EXT4-fs (loop1): get root inode failed [ 1966.906799] EXT4-fs (loop1): mount failed 00:47:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x20000000000081}, 0x0, 0x0, 0x0, 0x0, 0xab4}, r1, 0x0, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pwrite64(r2, &(0x7f0000000140)="bab9ff3c942aad10a82bcf5b5096b3455cb9aaf49e81a931ff35947e4ef0c500df713a6fa8dd21362c469bdb558d091e5b5af7870a1b08933a939a0d240a76609b1a0fb7ad2777701299d954589c064964e804dc58845a8f91aa363c6dd0dd986a530b7ab3b131790ef4c2bda2ce2c2a361570ff23192232aad20681a86a61c985f0eda74750892d7fbbc81de1377a5e432817a90cfba1dddadce3ec5c64c38fc7095a7fb1725fd62e1a94e7bc32f200ac3ec330ef9ba516e0d6b3d13fff566782728f9178cc5365", 0xc8, 0xff) readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000100)={0x9, 0x6, 0x4, 0x9, 0x0, 0x3}) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000800}, 0x0, 0x0, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ppoll(&(0x7f0000000000)=[{r2}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x80}, {}], 0x4, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) 00:47:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 7) 00:47:03 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:47:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) 00:47:03 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:47:03 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b0"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1967.076370] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 1967.169457] FAULT_INJECTION: forcing a failure. [ 1967.169457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1967.170911] CPU: 1 PID: 11494 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1967.171702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1967.172542] Call Trace: [ 1967.172823] dump_stack+0x107/0x167 [ 1967.173203] should_fail.cold+0x5/0xa [ 1967.173631] __alloc_pages_nodemask+0x182/0x600 [ 1967.174129] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1967.174751] ? find_get_entry+0x2c8/0x740 [ 1967.175190] ? __jbd2_journal_unfile_buffer+0xb0/0xb0 [ 1967.175723] alloc_pages_current+0x187/0x280 [ 1967.176182] __page_cache_alloc+0x2d2/0x360 [ 1967.176633] pagecache_get_page+0x2c7/0xc80 [ 1967.177086] grab_cache_page_write_begin+0x64/0xa0 [ 1967.177508] ext4_move_extents+0x1203/0x3050 [ 1967.177985] ? find_held_lock+0x2c/0x110 [ 1967.178329] ? lock_acquire+0x197/0x470 [ 1967.178735] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1967.179183] ? lock_release+0x680/0x680 [ 1967.179617] ? __fget_files+0x296/0x4c0 [ 1967.179970] __ext4_ioctl+0x302e/0x4190 [ 1967.180401] ? ext4_reset_inode_seed+0x450/0x450 [ 1967.180791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1967.181338] ? find_held_lock+0x2c/0x110 [ 1967.181688] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1967.182295] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1967.182740] ? do_vfs_ioctl+0x283/0x10d0 [ 1967.183154] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1967.183696] ? generic_block_fiemap+0x60/0x60 [ 1967.184167] ? __entry_text_end+0x4e3d/0x102932 [ 1967.184661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1967.185191] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1967.185765] ? trace_hardirqs_on+0x5b/0x180 [ 1967.186221] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1967.186786] ? __ext4_ioctl+0x4190/0x4190 [ 1967.187237] ? __ext4_ioctl+0x4190/0x4190 [ 1967.187667] __x64_sys_ioctl+0x19a/0x210 [ 1967.188092] do_syscall_64+0x33/0x40 [ 1967.188479] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1967.189000] RIP: 0033:0x7fcf117eeb19 [ 1967.189393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1967.191281] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1967.192060] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1967.192784] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1967.193512] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1967.194241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.194969] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:47:03 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1967.330128] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1967.330128] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1967.330128] 00:47:03 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(r0, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000080)=0x65, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = dup2(r4, r4) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000100)=0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0x13d) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x0, r1}, {0x2, 0x4, r6}], {0x4, 0xa}, [{0x8, 0x1, r2}], {0x10, 0x5}}, 0x44, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x1f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000080000000c00000000000000000400020008000c0000000000"], 0x1c}}, 0x0) [ 1967.360483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.361239] print_req_error: 22 callbacks suppressed [ 1967.361250] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.363056] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.364157] buffer_io_error: 6 callbacks suppressed [ 1967.364164] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1967.368884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.369541] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.371535] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.372634] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1967.373670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.374725] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.375914] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.377008] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1967.379653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.380369] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.381805] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.382903] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1967.383965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.384546] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.385891] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1967.387128] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1967.388425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.389389] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1967.389734] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1967.391671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.393007] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1967.394060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.394641] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1967.404472] EXT4-fs (loop1): get root inode failed [ 1967.405080] EXT4-fs (loop1): mount failed [ 1967.608105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.608817] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1967.612581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.613771] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1967.615177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.616434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.617402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.618538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.619469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1967.620541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:47:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 8) 00:47:19 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:47:19 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:47:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$dupfd(r0, 0x406, r1) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x3, 0x4) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) socketpair(0x21, 0x4, 0xfffffff7, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000940)={{r3}, 0x0, 0x1a, @inherit={0x60, 0x0}, @subvolid=0x4}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x4, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x16, 0x0, 0xee00}, {0x7, 0xcb7f, 0x6, 0x0, 0x3, 0x3d98000000000000, 0x8, 0x200}, {0xed, 0x2, 0x401, 0x90cc}, 0xd9b, 0x6e6bbd, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d4, 0xff}, 0x2, @in=@private=0xa010101, 0x3504, 0x3, 0x2, 0x5, 0xffff, 0x3, 0x3ff}}, 0xe8) 00:47:19 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:19 executing program 2: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000280)={{0x1, 0x22}, 'port0\x00', 0x24, 0x0, 0x6, 0x0, 0xfffffffa, 0x7ff, 0x81, 0x0, 0x2, 0x8}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e60, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fallocate(r2, 0x1b, 0x5, 0x3) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getrandom(0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000200)) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) [ 1983.243481] FAULT_INJECTION: forcing a failure. [ 1983.243481] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.245607] CPU: 1 PID: 11528 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1983.246653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.247922] Call Trace: [ 1983.248330] dump_stack+0x107/0x167 [ 1983.248879] should_fail.cold+0x5/0xa [ 1983.249460] ? create_object.isra.0+0x3a/0xa20 [ 1983.250169] should_failslab+0x5/0x20 [ 1983.250752] kmem_cache_alloc+0x5b/0x310 [ 1983.251374] create_object.isra.0+0x3a/0xa20 [ 1983.252049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1983.252832] kmem_cache_alloc+0x159/0x310 [ 1983.253476] xas_alloc+0x336/0x440 [ 1983.254033] xas_create+0x60f/0x10d0 [ 1983.254616] xas_store+0x8c/0x1c40 [ 1983.255161] ? xas_find_conflict+0x4b5/0xa70 [ 1983.255843] __add_to_page_cache_locked+0x708/0xc80 [ 1983.256628] ? file_write_and_wait_range+0x130/0x130 [ 1983.257419] ? memcg_drain_all_list_lrus+0x720/0x720 [ 1983.258217] ? find_get_entry+0x2c8/0x740 [ 1983.258866] add_to_page_cache_lru+0xe6/0x2e0 [ 1983.259576] ? add_to_page_cache_locked+0x40/0x40 [ 1983.260317] ? __page_cache_alloc+0x10d/0x360 [ 1983.261009] pagecache_get_page+0x38b/0xc80 [ 1983.261683] grab_cache_page_write_begin+0x64/0xa0 [ 1983.262446] ext4_move_extents+0x1203/0x3050 [ 1983.263173] ? lock_acquire+0x197/0x470 [ 1983.263783] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1983.264586] ? lock_release+0x680/0x680 [ 1983.265210] ? io_schedule_timeout+0x140/0x140 [ 1983.265905] ? __fget_files+0x296/0x4c0 [ 1983.266541] __ext4_ioctl+0x302e/0x4190 [ 1983.267167] ? ext4_reset_inode_seed+0x450/0x450 [ 1983.267918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1983.268725] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1983.269556] ? trace_hardirqs_on+0x5b/0x180 [ 1983.270213] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1983.271067] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1983.271933] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1983.272723] ? do_vfs_ioctl+0x283/0x10d0 [ 1983.273345] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1983.274136] ? generic_block_fiemap+0x60/0x60 [ 1983.274833] ? clockevents_program_event+0x131/0x360 [ 1983.275621] ? selinux_file_ioctl+0xb6/0x270 [ 1983.276309] ? __ext4_ioctl+0x4190/0x4190 [ 1983.276962] __x64_sys_ioctl+0x19a/0x210 [ 1983.277579] do_syscall_64+0x33/0x40 [ 1983.278167] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1983.278948] RIP: 0033:0x7fcf117eeb19 [ 1983.279516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.282287] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.283450] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1983.284548] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1983.285651] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.286759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.287854] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:47:19 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@flushpolicy={0x38, 0x12, 0xc9b8ebb5536361cd, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in6=@private1, @in6=@dev}}]}, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/129, 0x81}, {&(0x7f00000000c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000380)=""/195, 0xc3}], 0x5, &(0x7f0000000500)=""/48, 0x30}, 0x0, 0x0, 0x1, {0x0, r3}}, 0x8) 00:47:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:47:19 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:47:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x39, 0xfffffffffffffffc, 0x100000000006a) ftruncate(r0, 0x1000003) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x80000000}, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x4) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 00:47:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 9) 00:47:20 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:20 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1983.710721] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1983.710721] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1983.710721] [ 1983.713232] FAULT_INJECTION: forcing a failure. [ 1983.713232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1983.714431] CPU: 0 PID: 11563 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1983.714993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1983.715676] Call Trace: [ 1983.715917] dump_stack+0x107/0x167 [ 1983.716237] should_fail.cold+0x5/0xa [ 1983.716573] __alloc_pages_nodemask+0x182/0x600 [ 1983.716959] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1983.717450] ? find_get_entry+0x2c8/0x740 [ 1983.717796] ? lru_cache_add+0x45c/0x800 [ 1983.718132] alloc_pages_current+0x187/0x280 [ 1983.718498] __page_cache_alloc+0x2d2/0x360 [ 1983.718855] pagecache_get_page+0x2c7/0xc80 [ 1983.719212] grab_cache_page_write_begin+0x64/0xa0 [ 1983.719614] ext4_move_extents+0x1224/0x3050 [ 1983.719988] ? find_held_lock+0x2c/0x110 [ 1983.720322] ? lock_acquire+0x197/0x470 [ 1983.720646] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1983.721075] ? lock_release+0x680/0x680 [ 1983.721406] ? __fget_files+0x296/0x4c0 [ 1983.721749] __ext4_ioctl+0x302e/0x4190 [ 1983.722079] ? ext4_reset_inode_seed+0x450/0x450 [ 1983.722464] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1983.722891] ? find_held_lock+0x2c/0x110 [ 1983.723236] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1983.723702] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1983.724122] ? do_vfs_ioctl+0x283/0x10d0 [ 1983.724454] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1983.724879] ? generic_block_fiemap+0x60/0x60 [ 1983.725253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1983.725656] ? selinux_file_ioctl+0xb6/0x270 [ 1983.726026] ? __ext4_ioctl+0x4190/0x4190 [ 1983.726365] __x64_sys_ioctl+0x19a/0x210 [ 1983.726702] do_syscall_64+0x33/0x40 [ 1983.727008] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1983.727427] RIP: 0033:0x7fcf117eeb19 [ 1983.727732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1983.729214] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.729836] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1983.730414] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1983.730984] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1983.731554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.732127] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 1983.753084] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1983.756885] EXT4-fs (loop1): get root inode failed [ 1983.757468] EXT4-fs (loop1): mount failed [ 1983.929866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.930349] print_req_error: 22 callbacks suppressed [ 1983.930359] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.931693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.932155] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.933054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.933491] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.934399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.934859] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.935757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.936196] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.937085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.937526] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.938429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.938887] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.939785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.940223] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.941119] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.941990] buffer_io_error: 6 callbacks suppressed [ 1983.941997] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1983.943025] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1983.943883] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1983.944497] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1983.945125] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1983.945758] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1983.946373] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1983.947011] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1983.947624] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1983.984644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.985158] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1983.991591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.992087] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1983.992789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.993321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.993883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.994409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.994958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1983.995487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:47:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9050000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 10) 00:47:34 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:34 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a33935"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="30ffdfed", @ANYRES16=r3, @ANYBLOB="7998000000000000000007000000080001000000000008000500000000000a0004007770616e34000000"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r4, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 00:47:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f1", 0x4}], 0x1}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:47:34 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) [ 1998.227432] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1998.227432] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1998.227432] [ 1998.241406] FAULT_INJECTION: forcing a failure. [ 1998.241406] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.242444] CPU: 1 PID: 11589 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1998.243061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1998.243799] Call Trace: [ 1998.244044] dump_stack+0x107/0x167 [ 1998.244371] should_fail.cold+0x5/0xa [ 1998.244724] ? create_object.isra.0+0x3a/0xa20 [ 1998.245138] should_failslab+0x5/0x20 [ 1998.245489] kmem_cache_alloc+0x5b/0x310 [ 1998.245869] create_object.isra.0+0x3a/0xa20 [ 1998.246275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1998.246736] kmem_cache_alloc+0x159/0x310 [ 1998.247117] xas_alloc+0x336/0x440 [ 1998.247445] xas_create+0x60f/0x10d0 [ 1998.247802] xas_store+0x8c/0x1c40 [ 1998.248134] ? xas_find_conflict+0x4b5/0xa70 [ 1998.248552] __add_to_page_cache_locked+0x708/0xc80 [ 1998.249012] ? file_write_and_wait_range+0x130/0x130 [ 1998.249477] ? memcg_drain_all_list_lrus+0x720/0x720 [ 1998.249957] ? find_get_entry+0x2c8/0x740 [ 1998.250336] ? lru_cache_add+0x45c/0x800 [ 1998.250706] add_to_page_cache_lru+0xe6/0x2e0 [ 1998.251122] ? add_to_page_cache_locked+0x40/0x40 [ 1998.251567] ? __page_cache_alloc+0x10d/0x360 [ 1998.251986] pagecache_get_page+0x38b/0xc80 [ 1998.252382] grab_cache_page_write_begin+0x64/0xa0 [ 1998.252828] ext4_move_extents+0x1224/0x3050 [ 1998.253244] ? find_held_lock+0x2c/0x110 [ 1998.253620] ? lock_acquire+0x197/0x470 [ 1998.253991] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1998.254464] ? lock_release+0x680/0x680 [ 1998.254830] ? __fget_files+0x296/0x4c0 [ 1998.255204] __ext4_ioctl+0x302e/0x4190 [ 1998.255572] ? ext4_reset_inode_seed+0x450/0x450 [ 1998.256005] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1998.256481] ? find_held_lock+0x2c/0x110 [ 1998.256863] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1998.257383] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1998.257858] ? do_vfs_ioctl+0x283/0x10d0 [ 1998.258222] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1998.258693] ? generic_block_fiemap+0x60/0x60 [ 1998.259101] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1998.259542] ? selinux_file_ioctl+0xb6/0x270 [ 1998.259945] ? __ext4_ioctl+0x4190/0x4190 [ 1998.260323] __x64_sys_ioctl+0x19a/0x210 [ 1998.260692] do_syscall_64+0x33/0x40 [ 1998.261033] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1998.261505] RIP: 0033:0x7fcf117eeb19 [ 1998.261855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1998.263527] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1998.264208] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1998.264846] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1998.265484] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1998.266125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1998.266762] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 1998.295137] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1998.298064] EXT4-fs (loop1): get root inode failed [ 1998.299151] EXT4-fs (loop1): mount failed 00:47:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/127, 0x7f}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000040000100000002000000956926e11da54d8e5669a6621bbc08a6b4b9bb67de75a6c88bafbbbc13d063d0cc36438edda65edeae2ef592d57238ffc743e1c38bb2c0f717d331ab5f291509fcaeb7162b2c03fc794d6dfe5f904007d055111fab78245244bca4a47017992668f689f3d8a8bd3ea1c3b3fdb2417f7fff94d565ca3047438a6b88d8bc479859bfe4704d809620ab82a5a5d8efaa7391dbc865a3bb3b09f5594bb6481afacdcf12", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x100}, 0x20) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000001, 0x80010, r1, 0x1c332000) clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:47:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') close_range(0xffffffffffffffff, r0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x801}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r3, &(0x7f0000000180)='attr/keycreate\x00') timer_create(0x4, &(0x7f0000000000)={0x0, 0xb, 0x0, @thr={&(0x7f0000000300)="2d21e4594478de0b982d52b2d191791f29f9f13235a8bc5b33741cd1b3831be5a0b7a0119b06552388457d5e90731b5fbdaf071c5077b14506876dbaafff59df6825072152dbba1752c78a6f7936e7e739", 0xfffffffffffffffc}}, &(0x7f0000000380)=0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x32, 0x4, @thr={&(0x7f00000014c0)="f38489289a1ab892584f20de9f0fe19fc086a8d537a3dfe8f449e4415be9fb2c22f6950ad9fd5b0825154c0330a03857c387010f19923b652b0f6289e1bfec90dffb872d62c345c06826fa9f72cfa3c0b9621f4d257702187bd9738a85e0a7060da0d5e43ca3507341f7e55f5bbc498adee86d1058a714be8446b3f42f838ffc87c56a180074ef638268a50b98888d237cf657fad182347bea743e7b00517a61b5558ac029332a99f6240b6935fe624cf7a3c1336c40a85183bd2f9eff0171fc10642fa791ae494d30810c81702ae81d5327bc7189e8baf4674d8618cbcc54d66bfd3874f7de483ba92a24ecee66d0d81557b24b357db6773d", &(0x7f00000003c0)="d4022e31c109e6a13786438cdcb1d3b8a974bc4ec73f6ad44b523a9bcd279ed015f4eb328167ca5e03e1a6d09111d5b9922374e1b2c14ecc53a05ba97b96794b52395a0cdf6ef454c82a7634a69b7fa7b45bdfd2e5a5dfca173e70aba38e8d"}}, &(0x7f0000000140)) timer_settime(r4, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14ed71011600010d00"/20], 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) read(r5, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r4, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="017000ec0001ae2c31ee1e22667ba2cbc41600", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 00:47:34 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:47:34 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a33935"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:34 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:47:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 11) [ 1998.625134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.626089] print_req_error: 22 callbacks suppressed [ 1998.626108] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.628522] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.628583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.629460] buffer_io_error: 6 callbacks suppressed [ 1998.629476] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1998.630300] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.633398] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.633464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.634309] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1998.635131] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.637303] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.637370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.638226] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1998.639048] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.641227] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.641292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.642146] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1998.642976] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.645169] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1998.645239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.646069] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1998.647093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.647526] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1998.648409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1998.648937] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1998.650551] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1998.695213] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 1998.695213] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1998.695213] 00:47:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)={0x0, 0xfb, 0x401, 0x0, 0x0, "b0c87318b722fbf0f62e08cb13d84b5f", "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"}, 0x401, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', 'trusted.overlay.upper\x00'}, &(0x7f0000000140)=""/187, 0xbb) [ 1998.737810] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1998.739520] EXT4-fs (loop1): get root inode failed [ 1998.740182] EXT4-fs (loop1): mount failed 00:47:35 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a33935"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1998.810585] FAULT_INJECTION: forcing a failure. [ 1998.810585] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.812119] CPU: 1 PID: 11626 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 1998.812707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1998.813406] Call Trace: [ 1998.813633] dump_stack+0x107/0x167 [ 1998.813948] should_fail.cold+0x5/0xa [ 1998.814270] ? create_object.isra.0+0x3a/0xa20 [ 1998.814657] should_failslab+0x5/0x20 [ 1998.814982] kmem_cache_alloc+0x5b/0x310 [ 1998.815328] ? lock_downgrade+0x6d0/0x6d0 [ 1998.815680] create_object.isra.0+0x3a/0xa20 [ 1998.816051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1998.816474] __kmalloc+0x16e/0x390 [ 1998.816779] ext4_find_extent+0xa3d/0xd30 [ 1998.817136] ? add_to_page_cache_locked+0x40/0x40 [ 1998.817540] mext_check_coverage.constprop.0+0x226/0x3e0 [ 1998.818012] ? ext4_multi_mount_protect+0xab0/0xab0 [ 1998.818427] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1998.818857] ? wait_on_page_writeback+0xb9/0x240 [ 1998.819257] ext4_move_extents+0x12e0/0x3050 [ 1998.819640] ? find_held_lock+0x2c/0x110 [ 1998.819982] ? lock_acquire+0x197/0x470 [ 1998.820318] ? ext4_double_up_write_data_sem+0x30/0x30 [ 1998.820758] ? lock_release+0x680/0x680 [ 1998.821101] ? __fget_files+0x296/0x4c0 [ 1998.821443] __ext4_ioctl+0x302e/0x4190 [ 1998.821785] ? ext4_reset_inode_seed+0x450/0x450 [ 1998.822185] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1998.822634] ? find_held_lock+0x2c/0x110 [ 1998.822985] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1998.823465] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1998.823896] ? do_vfs_ioctl+0x283/0x10d0 [ 1998.824233] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1998.824672] ? generic_block_fiemap+0x60/0x60 [ 1998.825054] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1998.825471] ? selinux_file_ioctl+0xb6/0x270 [ 1998.825844] ? __ext4_ioctl+0x4190/0x4190 [ 1998.826198] __x64_sys_ioctl+0x19a/0x210 [ 1998.826539] do_syscall_64+0x33/0x40 [ 1998.826856] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 1998.827280] RIP: 0033:0x7fcf117eeb19 [ 1998.827594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1998.829124] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1998.829759] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 1998.830360] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 1998.830955] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 1998.831546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1998.832137] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 1998.966816] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1999.202880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.203433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.203978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.204471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.204987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.205481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.206007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.206502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1999.207020] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1999.207663] Buffer I/O error on dev loop4, logical block 2096897, async page read 00:47:49 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:49 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) chdir(&(0x7f0000000300)='./mnt\x00') syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f0000000100), &(0x7f0000000000)='./mnt\x00', 0x100, 0x0, 0x1}, 0x10000) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="f6ffffff0000000000000000040000000000200000000000000048001003000000000000"], 0x41, 0x0) 00:47:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:49 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:47:49 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5c}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x1e9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x328) pipe(&(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) fallocate(r3, 0x8, 0x8, 0x9) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4006801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 00:47:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 12) 00:47:49 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 2013.245659] FAULT_INJECTION: forcing a failure. [ 2013.245659] name failslab, interval 1, probability 0, space 0, times 0 [ 2013.247627] CPU: 0 PID: 11649 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2013.248669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2013.249909] Call Trace: [ 2013.250327] dump_stack+0x107/0x167 [ 2013.250874] should_fail.cold+0x5/0xa [ 2013.251451] ? create_object.isra.0+0x3a/0xa20 [ 2013.252137] should_failslab+0x5/0x20 [ 2013.252714] kmem_cache_alloc+0x5b/0x310 [ 2013.253324] ? lock_downgrade+0x6d0/0x6d0 [ 2013.253950] create_object.isra.0+0x3a/0xa20 [ 2013.254621] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2013.255382] __kmalloc+0x16e/0x390 [ 2013.255925] ext4_find_extent+0xa3d/0xd30 [ 2013.256552] ? add_to_page_cache_locked+0x40/0x40 [ 2013.257278] mext_check_coverage.constprop.0+0x226/0x3e0 [ 2013.258097] ? ext4_multi_mount_protect+0xab0/0xab0 [ 2013.258841] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2013.259603] ? wait_on_page_writeback+0xb9/0x240 [ 2013.260317] ext4_move_extents+0x12e0/0x3050 [ 2013.261007] ? find_held_lock+0x2c/0x110 [ 2013.261630] ? lock_acquire+0x197/0x470 [ 2013.262453] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2013.263412] ? lock_release+0x680/0x680 [ 2013.264131] ? __fget_files+0x296/0x4c0 [ 2013.264874] __ext4_ioctl+0x302e/0x4190 [ 2013.265598] ? ext4_reset_inode_seed+0x450/0x450 [ 2013.266428] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2013.267215] ? find_held_lock+0x2c/0x110 [ 2013.267841] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2013.268698] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2013.269466] ? do_vfs_ioctl+0x283/0x10d0 [ 2013.270084] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2013.270870] ? generic_block_fiemap+0x60/0x60 [ 2013.271545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2013.272286] ? selinux_file_ioctl+0xb6/0x270 [ 2013.272958] ? __ext4_ioctl+0x4190/0x4190 [ 2013.273584] __x64_sys_ioctl+0x19a/0x210 [ 2013.274192] do_syscall_64+0x33/0x40 [ 2013.274748] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2013.275504] RIP: 0033:0x7fcf117eeb19 [ 2013.276060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2013.278751] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2013.279865] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2013.280906] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2013.281946] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2013.282997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2013.284040] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:47:49 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:47:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000580)={0x3, 0x6, 0x6, 0x8000, 0x2, [{0x7, 0x1, 0x8, '\x00', 0x180}, {0x3, 0x10000, 0x7fffffff, '\x00', 0x4}]}) read(r0, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd_index=0x9, 0x7ff, 0x6c4, 0x626, 0x18, 0x45c7bc2871b72058, {0x3}}, 0x80) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000380)={0x7, 0xf6f6}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x4, &(0x7f0000000440)=[{&(0x7f0000000080)="a12eb62a34840cead5a8ebc3b8e862c8e7d451c29450228b7a87e9b7b7f76dd2e9ba077df5421332e989a9836d4aa561f933a592391843efeca9afbbfd8854995ebe588f942e2c5a2d94c5e27c195247a3e40925982a4fc015815c314c07b2051af1df2d3150361b9b02dbab", 0x6c, 0x6}, {&(0x7f0000000100)="e1ceef803e44b97993909eb2cfac109ba1e770729ed4001bdddba2566d58814ee4a9bb57883b76d120ebba534ddf57706a605384db9d66281d54668d46d24f3befc18ab6e54824a182cd8ebb4c7d57718a41f2201228e18f0c95ac3990e504743bd4d4fcfbc503ed538aa733af0ae0a2a1786633f815cb6902bde8899ba6bd9ce6d6b4d69b26033b9596f121cd6fe4588d4fc301ffbe79edd82812e8ad1003d64b0b59c1f4a69070a1191fde54aef5807528c14f1d06b721e6f114cb658df30db5b468f5", 0xc4, 0x1000}, {&(0x7f0000000200)="6f3cdbb73b96c881f81807d7450be150c1e1f3a5021ff8038b6e72085d2008507726a6fb4f87902ecd070b6175a6eadae1e5350c06a9151d7a9ced42ab922f37450989340832d09cbe3cc9f79f143b8f1f4aa94c2e0aceba6eb580906ec580bea972fcdce803de2e8eeeb831d4df81bab80012e9af718341e3a2acaf24d3e95a0f29987f87c43483fee30103c54669d025f56cb010ffca615129f79eadbe1cd8bbcfe591bb0b97307f80534739bfc1ef9abd91441c3e01f41ef6e1065afb4e7e80b9a2e895237c9e70845b20", 0xcc, 0x8}, {&(0x7f0000000300)="2d7ef813ff2b4683fb420b028d9964690f80ff05f38fa259d77e45ff1e57110561e9b9b7e14bba1d280c1a7ef3502fafd5f33769a226d0d251070e8ff22cac5c3abbef1277837f780c282a00000000000000", 0x52, 0x137}], 0x1880804, &(0x7f00000004c0)={[{@usrjquota}, {@oldalloc}, {@nouid32}, {@grpjquota}, {@noquota}], [{@fsname={'fsname', 0x3d, '/dev/sr0\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '/dev/sr0\x00'}}]}) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:47:49 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb050000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:47:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 2014.012379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.013090] print_req_error: 22 callbacks suppressed [ 2014.013105] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.015229] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.016445] buffer_io_error: 6 callbacks suppressed [ 2014.016454] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2014.031379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.032589] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.033844] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.035069] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2014.036016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.036625] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.037866] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.037903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.038788] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2014.039390] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.041195] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.041240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.042089] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2014.042691] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.044525] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2014.044569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.045419] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2014.046112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.046668] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2014.047328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.047884] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2014.049098] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2014.073874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.074557] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2014.074601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.075953] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2014.075988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.077302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.078013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.078709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.079452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2014.080159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:48:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 13) 00:48:02 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) r3 = clone3(&(0x7f0000000380)={0x200020100, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x34}, &(0x7f00000001c0)=""/239, 0xef, &(0x7f00000002c0)=""/173, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7, {r0}}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xb4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x10001}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x800006, 0x0, 0x0, 0x800}, r3, 0xa, 0xffffffffffffffff, 0x0) r4 = getpgid(0x0) r5 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r5, &(0x7f0000000040)={r5}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 00:48:02 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:02 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:02 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:48:02 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x43b9, &(0x7f0000000140)={0x0, 0xbb58, 0x9, 0x2, 0x3a8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1014, 0x39, 0x100, 0x70bd2d, 0x25dfdbfe, {0xe}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x50}, 0x240008c0) [ 2026.509629] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2026.509629] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2026.509629] [ 2026.520412] FAULT_INJECTION: forcing a failure. [ 2026.520412] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.523288] CPU: 1 PID: 11693 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2026.524297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2026.525499] Call Trace: [ 2026.525923] dump_stack+0x107/0x167 [ 2026.526475] should_fail.cold+0x5/0xa [ 2026.527051] ? create_object.isra.0+0x3a/0xa20 [ 2026.527713] should_failslab+0x5/0x20 [ 2026.528274] kmem_cache_alloc+0x5b/0x310 [ 2026.528863] ? lock_downgrade+0x6d0/0x6d0 [ 2026.529467] create_object.isra.0+0x3a/0xa20 [ 2026.530102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2026.530841] __kmalloc+0x16e/0x390 [ 2026.531362] ext4_find_extent+0xa3d/0xd30 [ 2026.531969] ? add_to_page_cache_locked+0x40/0x40 [ 2026.532671] mext_check_coverage.constprop.0+0x226/0x3e0 [ 2026.533458] ? ext4_multi_mount_protect+0xab0/0xab0 [ 2026.534190] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2026.534925] ? wait_on_page_writeback+0xb9/0x240 [ 2026.535609] ext4_move_extents+0x12e0/0x3050 [ 2026.536279] ? find_held_lock+0x2c/0x110 [ 2026.536898] ? lock_acquire+0x197/0x470 [ 2026.537475] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2026.538241] ? lock_release+0x680/0x680 [ 2026.538545] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 2026.538828] ? __fget_files+0x296/0x4c0 [ 2026.539964] EXT4-fs (loop1): get root inode failed [ 2026.540375] __ext4_ioctl+0x302e/0x4190 [ 2026.540782] EXT4-fs (loop1): mount failed [ 2026.541342] ? ext4_reset_inode_seed+0x450/0x450 [ 2026.542348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2026.543105] ? find_held_lock+0x2c/0x110 [ 2026.543707] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2026.544535] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2026.545280] ? do_vfs_ioctl+0x283/0x10d0 [ 2026.545864] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2026.546624] ? generic_block_fiemap+0x60/0x60 [ 2026.547275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2026.547990] ? selinux_file_ioctl+0xb6/0x270 [ 2026.548637] ? __ext4_ioctl+0x4190/0x4190 [ 2026.549243] __x64_sys_ioctl+0x19a/0x210 [ 2026.549839] do_syscall_64+0x33/0x40 [ 2026.550392] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2026.551135] RIP: 0033:0x7fcf117eeb19 [ 2026.551679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2026.554341] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2026.555443] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2026.556467] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2026.557500] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2026.558532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2026.559561] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:48:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:03 executing program 0: unshare(0x400) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x81, 0x1000}, {0x0, 0xfff8}], 0x2, 0x0) unshare(0x40000) 00:48:03 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:48:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 14) 00:48:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:48:03 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:03 executing program 2: open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x125342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) recvmmsg(r1, &(0x7f0000003840)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001600)=[{&(0x7f000001cac0)=""/200, 0xc8}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f000001ca00)=""/191, 0xbf}, {&(0x7f0000003a00)=""/102400, 0x19000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001480)=""/38, 0x26}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001580)=""/65, 0x41}], 0x9, &(0x7f00000016c0)=""/230, 0xe6}, 0x3}, {{&(0x7f00000017c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001840)=""/111, 0x6f}, {&(0x7f00000018c0)=""/156, 0x9c}, {&(0x7f0000001980)=""/106, 0x6a}, {&(0x7f0000001a00)=""/53, 0x35}, {&(0x7f0000001a40)=""/158, 0x9e}, {&(0x7f0000001b00)=""/166, 0xa6}, {&(0x7f0000001bc0)=""/136, 0x88}], 0x7, &(0x7f0000001d00)=""/38, 0x26}, 0x80000001}, {{&(0x7f0000002e00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001d40)=""/40, 0x28}, {&(0x7f0000002e80)=""/202, 0xca}, {&(0x7f0000002f80)=""/69, 0x45}, {&(0x7f0000003000)=""/142, 0x8e}, {&(0x7f00000030c0)=""/246, 0xf6}, {&(0x7f00000031c0)=""/246, 0xf6}, {&(0x7f00000032c0)=""/57, 0x39}], 0x7, &(0x7f0000003380)=""/79, 0x4f}, 0x7}, {{&(0x7f0000003400)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/112, 0x70}, {&(0x7f0000003500)=""/39, 0x27}, {&(0x7f0000003540)=""/124, 0x7c}], 0x3, &(0x7f0000003600)=""/210, 0xd2}, 0x2}, {{&(0x7f0000003700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003780)=""/112, 0x70}], 0x1}, 0x5}], 0x5, 0x40000001, &(0x7f0000003980)={0x77359400}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000340)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) syz_open_procfs(0x0, &(0x7f00000039c0)='net/rfcomm\x00') 00:48:03 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:03 executing program 0: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$revoke(0x3, r3) request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)='keyring\x00', r3) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x924, 0x2, 0x5b06}) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) unshare(0x48020200) 00:48:03 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 2026.885747] FAULT_INJECTION: forcing a failure. [ 2026.885747] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.887193] CPU: 0 PID: 11719 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2026.887779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2026.888486] Call Trace: [ 2026.888710] dump_stack+0x107/0x167 [ 2026.889013] should_fail.cold+0x5/0xa [ 2026.889333] ? __es_insert_extent+0xed1/0x1370 [ 2026.889711] should_failslab+0x5/0x20 [ 2026.890028] kmem_cache_alloc+0x5b/0x310 [ 2026.890372] __es_insert_extent+0xed1/0x1370 [ 2026.890743] ? mark_lock+0xf5/0x2df0 [ 2026.891048] ? __es_tree_search.isra.0+0x1af/0x220 [ 2026.891456] __es_remove_extent+0x72d/0x1560 [ 2026.891818] ? lockdep_next_lockchain+0x21/0x30 [ 2026.892204] ? count_rsvd.isra.0+0x540/0x540 [ 2026.892568] ? lock_release+0x680/0x680 [ 2026.892896] ? lock_acquire+0x197/0x470 [ 2026.893231] ? do_raw_write_lock+0x11a/0x280 [ 2026.893596] ? do_raw_read_unlock+0x70/0x70 [ 2026.893959] ext4_es_remove_extent+0x2e3/0x450 [ 2026.894339] ? ext4_es_lookup_extent+0xaa0/0xaa0 [ 2026.894729] ? __kasan_slab_free+0x122/0x160 [ 2026.895091] ext4_swap_extents+0x224/0x14c0 [ 2026.895446] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2026.895904] ? kfree+0xd7/0x340 [ 2026.896192] ? ext4_get_es_cache+0x600/0x600 [ 2026.896558] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2026.896985] ext4_move_extents+0x2566/0x3050 [ 2026.897364] ? find_held_lock+0x2c/0x110 [ 2026.897700] ? lock_acquire+0x197/0x470 [ 2026.898031] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2026.898467] ? lock_release+0x680/0x680 [ 2026.898801] ? __fget_files+0x296/0x4c0 [ 2026.899149] __ext4_ioctl+0x302e/0x4190 [ 2026.899485] ? ext4_reset_inode_seed+0x450/0x450 [ 2026.899877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2026.900314] ? find_held_lock+0x2c/0x110 [ 2026.900661] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2026.901133] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2026.901563] ? do_vfs_ioctl+0x283/0x10d0 [ 2026.901895] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2026.902334] ? generic_block_fiemap+0x60/0x60 [ 2026.902706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2026.903115] ? selinux_file_ioctl+0xb6/0x270 [ 2026.903479] ? __ext4_ioctl+0x4190/0x4190 [ 2026.903822] __x64_sys_ioctl+0x19a/0x210 [ 2026.904158] do_syscall_64+0x33/0x40 [ 2026.904462] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2026.904882] RIP: 0033:0x7fcf117eeb19 [ 2026.905186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2026.906680] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2026.907303] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2026.907886] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2026.908465] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2026.909052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2026.909638] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2026.982560] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2026.982560] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2026.982560] [ 2027.002446] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 2027.003033] EXT4-fs (loop1): mount failed [ 2027.305407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.306294] print_req_error: 22 callbacks suppressed [ 2027.306313] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.308827] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.308886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.309750] buffer_io_error: 6 callbacks suppressed [ 2027.309758] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2027.310570] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.313644] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.313715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.314531] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2027.315348] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.317810] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.317878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.318786] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2027.319547] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.322037] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.322086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.322983] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2027.323770] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.326182] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2027.326257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.327097] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2027.328007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.328547] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2027.329664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.329943] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2027.331373] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2027.500960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.501488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.502013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.502506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.503015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.503498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.504006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.504495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.504981] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2027.505610] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2027.524667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.526619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.527361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.528665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.529553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.530742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.531676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2027.532581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:48:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) fcntl$dupfd(r0, 0x406, r0) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='loginuid\x00') readv(r3, &(0x7f0000001600)=[{0x0}], 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 00:48:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12010000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x7f, 0x0, 0x4, 0x0, 0x800006}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r0, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:48:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 15) 00:48:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 00:48:18 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:18 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:18 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2041.669200] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2041.719574] FAULT_INJECTION: forcing a failure. [ 2041.719574] name failslab, interval 1, probability 0, space 0, times 0 [ 2041.721582] CPU: 1 PID: 11751 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2041.722660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2041.723956] Call Trace: [ 2041.724438] dump_stack+0x107/0x167 [ 2041.725105] should_fail.cold+0x5/0xa [ 2041.725749] ? __es_insert_extent+0xed1/0x1370 [ 2041.726472] should_failslab+0x5/0x20 [ 2041.727068] kmem_cache_alloc+0x5b/0x310 [ 2041.727691] __es_insert_extent+0xed1/0x1370 [ 2041.728390] ? mark_lock+0xf5/0x2df0 [ 2041.728971] ? __es_tree_search.isra.0+0x1af/0x220 [ 2041.729739] __es_remove_extent+0x72d/0x1560 [ 2041.730433] ? lockdep_next_lockchain+0x21/0x30 [ 2041.731168] ? count_rsvd.isra.0+0x540/0x540 [ 2041.731855] ? lock_release+0x680/0x680 [ 2041.732466] ? lock_acquire+0x197/0x470 [ 2041.733090] ? do_raw_write_lock+0x11a/0x280 [ 2041.733769] ? do_raw_read_unlock+0x70/0x70 [ 2041.734460] ext4_es_remove_extent+0x2e3/0x450 [ 2041.735175] ? ext4_es_lookup_extent+0xaa0/0xaa0 [ 2041.735894] ? __kasan_slab_free+0x122/0x160 [ 2041.736577] ext4_swap_extents+0x224/0x14c0 [ 2041.737246] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2041.738092] ? kfree+0xd7/0x340 [ 2041.738621] ? ext4_get_es_cache+0x600/0x600 [ 2041.739301] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2041.740351] ext4_move_extents+0x2566/0x3050 [ 2041.740449] ? find_held_lock+0x2c/0x110 [ 2041.740491] ? lock_acquire+0x197/0x470 [ 2041.742358] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2041.743166] ? lock_release+0x680/0x680 [ 2041.743771] ? __fget_files+0x296/0x4c0 [ 2041.744429] __ext4_ioctl+0x302e/0x4190 [ 2041.745063] ? ext4_reset_inode_seed+0x450/0x450 [ 2041.745795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2041.746608] ? find_held_lock+0x2c/0x110 [ 2041.747242] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2041.748133] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2041.748931] ? do_vfs_ioctl+0x283/0x10d0 [ 2041.749550] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2041.750341] ? generic_block_fiemap+0x60/0x60 [ 2041.751044] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2041.751789] ? selinux_file_ioctl+0xb6/0x270 [ 2041.752476] ? __ext4_ioctl+0x4190/0x4190 [ 2041.753112] __x64_sys_ioctl+0x19a/0x210 [ 2041.753720] do_syscall_64+0x33/0x40 [ 2041.754291] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2041.755076] RIP: 0033:0x7fcf117eeb19 [ 2041.755653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2041.758321] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2041.759464] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2041.760524] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2041.761599] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2041.762682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2041.763755] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:48:18 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x16000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 2041.811873] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2041.811873] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2041.811873] 00:48:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) [ 2041.846492] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 2041.847691] EXT4-fs (loop1): mount failed 00:48:18 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 16) [ 2042.255507] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2042.255507] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2042.255507] [ 2042.265709] FAULT_INJECTION: forcing a failure. [ 2042.265709] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.268001] CPU: 0 PID: 11775 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2042.269055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2042.270314] Call Trace: [ 2042.270737] dump_stack+0x107/0x167 [ 2042.271309] should_fail.cold+0x5/0xa [ 2042.271891] ? ext4_find_extent+0xa3d/0xd30 [ 2042.272551] should_failslab+0x5/0x20 [ 2042.273133] __kmalloc+0x72/0x390 [ 2042.273667] ext4_find_extent+0xa3d/0xd30 [ 2042.274309] ext4_swap_extents+0x321/0x14c0 [ 2042.274978] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2042.275826] ? kfree+0xd7/0x340 [ 2042.276334] ? ext4_get_es_cache+0x600/0x600 [ 2042.277012] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2042.277790] ext4_move_extents+0x2566/0x3050 [ 2042.278495] ? find_held_lock+0x2c/0x110 [ 2042.279122] ? lock_acquire+0x197/0x470 [ 2042.279726] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2042.280515] ? lock_release+0x680/0x680 [ 2042.281128] ? __fget_files+0x296/0x4c0 [ 2042.281753] __ext4_ioctl+0x302e/0x4190 [ 2042.282378] ? ext4_reset_inode_seed+0x450/0x450 [ 2042.283101] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2042.283898] ? find_held_lock+0x2c/0x110 [ 2042.284533] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2042.285399] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2042.286178] ? do_vfs_ioctl+0x283/0x10d0 [ 2042.286796] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2042.287587] ? generic_block_fiemap+0x60/0x60 [ 2042.288270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2042.289019] ? selinux_file_ioctl+0xb6/0x270 [ 2042.289689] ? __ext4_ioctl+0x4190/0x4190 [ 2042.290320] __x64_sys_ioctl+0x19a/0x210 [ 2042.290948] do_syscall_64+0x33/0x40 [ 2042.291512] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2042.292299] RIP: 0033:0x7fcf117eeb19 [ 2042.292866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2042.295612] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2042.296753] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2042.297824] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2042.298896] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2042.299971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2042.301033] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2042.340068] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 2042.345450] EXT4-fs (loop1): mount failed [ 2042.404829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.405651] print_req_error: 38 callbacks suppressed [ 2042.405669] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.408138] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.408183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.409768] buffer_io_error: 14 callbacks suppressed [ 2042.409780] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2042.410565] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.414010] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.414060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.415608] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2042.416426] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.419122] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.419191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.420708] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2042.421527] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.424346] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.424635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.425926] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2042.427981] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.429656] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2042.429687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.431193] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2042.432134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.433270] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2042.434055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2042.435078] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2042.440232] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:48:31 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:31 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/xfrm_stat\x00') perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8, 0xff, 0xbb, 0x3f, 0x0, 0x6, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x7ff, 0x1, 0x0, 0x3, 0x6abb, 0x4bb, 0x0, 0x10001, 0x0, 0x100}, r2, 0x8, r0, 0x9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r1, r3, 0x0, 0xffe3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000f, 0x10010, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x4f91e4bb97d3333d) syz_io_uring_setup(0x43db, &(0x7f0000000100)={0x0, 0xf1b, 0x1, 0x3, 0x148, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:48:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x22280, 0x100) syz_mount_image$nfs4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, 'memory.high\x00'}}]}) 00:48:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) 00:48:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 17) 00:48:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:31 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2055.393417] cgroup: No subsys list or none specified [ 2055.437425] cgroup: No subsys list or none specified 00:48:31 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1c300000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 2055.451119] audit: type=1400 audit(1713401311.999:48): avc: denied { map } for pid=11786 comm="syz-executor.0" path="pipe:[42322]" dev="pipefs" ino=42322 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 2055.456161] audit: type=1400 audit(1713401312.000:49): avc: denied { execute } for pid=11786 comm="syz-executor.0" path="pipe:[42322]" dev="pipefs" ino=42322 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 2055.520564] FAULT_INJECTION: forcing a failure. [ 2055.520564] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.522512] CPU: 0 PID: 11799 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2055.523548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.524768] Call Trace: [ 2055.525168] dump_stack+0x107/0x167 [ 2055.525714] should_fail.cold+0x5/0xa [ 2055.526283] ? ext4_find_extent+0xa3d/0xd30 [ 2055.526935] should_failslab+0x5/0x20 [ 2055.527505] __kmalloc+0x72/0x390 [ 2055.528032] ext4_find_extent+0xa3d/0xd30 [ 2055.528663] ext4_swap_extents+0x321/0x14c0 [ 2055.529324] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2055.530150] ? kfree+0xd7/0x340 [ 2055.530664] ? ext4_get_es_cache+0x600/0x600 [ 2055.531327] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2055.532088] ext4_move_extents+0x2566/0x3050 [ 2055.532779] ? find_held_lock+0x2c/0x110 [ 2055.533392] ? lock_acquire+0x197/0x470 [ 2055.533987] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2055.534777] ? lock_release+0x680/0x680 [ 2055.535381] ? __fget_files+0x296/0x4c0 [ 2055.536003] __ext4_ioctl+0x302e/0x4190 [ 2055.536614] ? ext4_reset_inode_seed+0x450/0x450 [ 2055.537313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2055.538088] ? SOFTIRQ_verbose+0x10/0x10 [ 2055.538703] ? find_held_lock+0x2c/0x110 [ 2055.539326] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2055.540175] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2055.540941] ? do_vfs_ioctl+0x283/0x10d0 [ 2055.541545] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2055.542323] ? generic_block_fiemap+0x60/0x60 [ 2055.542992] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2055.543743] ? selinux_file_ioctl+0xb6/0x270 [ 2055.544413] ? __ext4_ioctl+0x4190/0x4190 [ 2055.545049] __x64_sys_ioctl+0x19a/0x210 [ 2055.545668] do_syscall_64+0x33/0x40 [ 2055.546235] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2055.547027] RIP: 0033:0x7fcf117eeb19 [ 2055.547588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.550329] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2055.551496] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2055.552563] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2055.553637] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.554717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2055.555761] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2055.574455] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2055.574455] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2055.574455] 00:48:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x22280, 0x100) syz_mount_image$nfs4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, 'memory.high\x00'}}]}) 00:48:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) [ 2055.619082] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 2055.643711] EXT4-fs (loop1): get root inode failed [ 2055.645000] EXT4-fs (loop1): mount failed 00:48:32 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:32 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:32 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000440)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) acct(&(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6, 0x1, 0x1d, 0x5, "7433f7ae2a1a13de04add79767bacd4c5b5e6a2aa456bca04d1a86584269f53f3245af6b1e718a6f16e246ecd58536df65d9ba3f788938250b917d3a7a3b9012", "bb27c53b1e726e690fd36931fd5d3fc82165c0fb5da998783ccdf7c0d88bffc1", [0x0, 0x7]}) fallocate(0xffffffffffffffff, 0x0, 0xe65, 0x0) 00:48:32 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 18) [ 2055.828088] cgroup: No subsys list or none specified 00:48:32 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1f870000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x22280, 0x100) syz_mount_image$nfs4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, 'memory.high\x00'}}]}) 00:48:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 2056.046650] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2056.046650] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2056.046650] [ 2056.065182] cgroup: No subsys list or none specified [ 2056.087974] EXT4-fs error (device loop1): ext4_fill_super:4962: inode #2: comm syz-executor.1: iget: special inode unallocated [ 2056.097061] FAULT_INJECTION: forcing a failure. [ 2056.097061] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.099053] CPU: 1 PID: 11829 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2056.100237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.101494] Call Trace: [ 2056.101922] dump_stack+0x107/0x167 [ 2056.102491] should_fail.cold+0x5/0xa [ 2056.103092] ? create_object.isra.0+0x3a/0xa20 [ 2056.103782] should_failslab+0x5/0x20 [ 2056.104364] kmem_cache_alloc+0x5b/0x310 [ 2056.104986] create_object.isra.0+0x3a/0xa20 [ 2056.105644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2056.106417] __kmalloc+0x16e/0x390 [ 2056.106982] ext4_find_extent+0xa3d/0xd30 [ 2056.107627] ext4_swap_extents+0x321/0x14c0 [ 2056.108294] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2056.109139] ? kfree+0xd7/0x340 [ 2056.109668] ? ext4_get_es_cache+0x600/0x600 [ 2056.110350] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2056.111144] ext4_move_extents+0x2566/0x3050 [ 2056.111849] ? find_held_lock+0x2c/0x110 [ 2056.112479] ? lock_acquire+0x197/0x470 [ 2056.113094] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2056.113885] ? lock_release+0x680/0x680 [ 2056.114498] ? __fget_files+0x296/0x4c0 [ 2056.115135] __ext4_ioctl+0x302e/0x4190 [ 2056.115760] ? ext4_reset_inode_seed+0x450/0x450 [ 2056.116485] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2056.117272] ? find_held_lock+0x2c/0x110 [ 2056.117907] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2056.118776] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2056.119552] ? do_vfs_ioctl+0x283/0x10d0 [ 2056.120175] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2056.120965] ? generic_block_fiemap+0x60/0x60 [ 2056.121649] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2056.122409] ? selinux_file_ioctl+0xb6/0x270 [ 2056.123096] ? __ext4_ioctl+0x4190/0x4190 [ 2056.123724] __x64_sys_ioctl+0x19a/0x210 [ 2056.124334] do_syscall_64+0x33/0x40 [ 2056.124915] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2056.125683] RIP: 0033:0x7fcf117eeb19 [ 2056.126255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.129022] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2056.130171] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2056.131240] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2056.132320] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2056.133389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2056.134466] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2056.137984] EXT4-fs (loop1): get root inode failed [ 2056.138863] EXT4-fs (loop1): mount failed 00:48:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x22280, 0x100) syz_mount_image$nfs4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, 'memory.high\x00'}}]}) [ 2056.405569] cgroup: No subsys list or none specified [ 2056.571421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.572107] print_req_error: 6 callbacks suppressed [ 2056.572122] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.573944] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.575159] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2056.576158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.576793] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.578008] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.579196] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2056.580157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.580805] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.582025] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.583226] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2056.584180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.584819] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.586117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.586760] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.588026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.588623] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.589898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.590497] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2056.591781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.592408] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2056.593268] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2056.594129] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2056.595014] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2056.595874] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2056.626480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.627148] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2056.629251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.629914] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2056.630884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.631602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.632362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.633103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.633837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.634534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.656882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.663748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.664463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.665195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.665916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.666613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.667338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2056.668072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:48:46 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file2\x00', 0x10) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = epoll_create(0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x30000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140), 0x4) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) read$eventfd(r6, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x7, @tid=r7}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x40, 0x3, 0x7f, 0x0, 0xff, 0x20202, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2}, 0x11544, 0x9, 0x7fffffff, 0x1, 0x9, 0x2, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0x4}) 00:48:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:48:46 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:46 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000400)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0187e1ff53ef010001000000dbf4655f00000000000000000100004208a4ffbf14ad6e000001000008000000d24201734a", 0x65, 0x400}, {&(0x7f0000000340)="000000000000000000000000457900aa5f634b37b3ec3232a27d76ed9c7a311e22dd28f05295cbfbb818025529e576fed49293fcf98d9490fdefa4248b0109f50f187a456315def0db90352701c0d7da97c3e92367e30f3f8535acc2325c568ba8a5e86eebe2c57e7918affc583bb4fdb20700516db9a466552980034ace", 0x7e, 0x4e0}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16"]) 00:48:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 19) 00:48:46 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2069.756040] EXT4-fs (loop0): bad s_min_extra_isize: 52810 [ 2069.784229] FAULT_INJECTION: forcing a failure. [ 2069.784229] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.785381] CPU: 0 PID: 11855 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2069.785994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2069.786728] Call Trace: [ 2069.786971] dump_stack+0x107/0x167 [ 2069.787305] should_fail.cold+0x5/0xa [ 2069.787648] ? create_object.isra.0+0x3a/0xa20 [ 2069.788058] should_failslab+0x5/0x20 [ 2069.788411] kmem_cache_alloc+0x5b/0x310 [ 2069.788781] ? mark_held_locks+0x9e/0xe0 [ 2069.789147] create_object.isra.0+0x3a/0xa20 [ 2069.789543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2069.789997] __kmalloc+0x16e/0x390 [ 2069.790323] ext4_find_extent+0xa3d/0xd30 [ 2069.790710] ext4_swap_extents+0x361/0x14c0 [ 2069.791104] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2069.791607] ? kfree+0xd7/0x340 [ 2069.791916] ? ext4_get_es_cache+0x600/0x600 [ 2069.792316] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2069.792778] ext4_move_extents+0x2566/0x3050 [ 2069.793199] ? find_held_lock+0x2c/0x110 [ 2069.793572] ? lock_acquire+0x197/0x470 [ 2069.793931] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2069.794397] ? lock_release+0x680/0x680 [ 2069.794774] ? __fget_files+0x296/0x4c0 [ 2069.795144] __ext4_ioctl+0x302e/0x4190 [ 2069.795512] ? ext4_reset_inode_seed+0x450/0x450 [ 2069.795942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2069.796308] EXT4-fs (loop0): bad s_min_extra_isize: 52810 [ 2069.796419] ? find_held_lock+0x2c/0x110 [ 2069.797623] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2069.798144] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2069.798603] ? do_vfs_ioctl+0x283/0x10d0 [ 2069.798979] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2069.799445] ? generic_block_fiemap+0x60/0x60 [ 2069.799854] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2069.800298] ? selinux_file_ioctl+0xb6/0x270 [ 2069.800698] ? __ext4_ioctl+0x4190/0x4190 [ 2069.801073] __x64_sys_ioctl+0x19a/0x210 [ 2069.801442] do_syscall_64+0x33/0x40 [ 2069.801780] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2069.802239] RIP: 0033:0x7fcf117eeb19 [ 2069.802574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2069.804217] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.804907] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2069.805541] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2069.806175] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2069.806820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2069.807452] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:48:46 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20100000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_mount_image$tmpfs(0x0, 0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYRESHEX=0xee01, @ANYBLOB="000000002753cfd2ed7b10b4cade49980cb058100000000000000000000000000000a1a411564e9a97d30a09a1cdee05a51e7ff9883ea16d9d80c7fbfa75d8cfabbfe5651cdca145a07ef4e9c060000039658a70fdaac3136eeaf9f183fec483ef8f9b14bd521369bf2dd0651691b78d982cc5a7b8653577e15fe130407b"]) r2 = socket$inet(0xa, 0x3, 0xff) r3 = dup(r2) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000180), 0x4) r4 = dup(r3) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000180), 0x4) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0xa, @unused=[0x3, 0x8, 0x4, 0xb4], @name="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"}) openat(r4, &(0x7f00000000c0)='./file1\x00', 0x842, 0x2e) syz_io_uring_complete(0x0) r6 = dup(r1) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x0, @unused=[0x5], @subvolid}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:48:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 2070.305901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.306788] print_req_error: 38 callbacks suppressed [ 2070.306807] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.309272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.310126] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.311830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.312653] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.314316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.315186] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.316851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.317668] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.319314] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.320922] buffer_io_error: 14 callbacks suppressed [ 2070.320933] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2070.322890] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.324483] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2070.325663] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.327269] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2070.328442] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.330034] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2070.331210] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2070.332802] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2070.334082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.335046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.335984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.344794] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2070.346002] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2070.347195] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2070.385919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.386847] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2070.405924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.406853] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2070.406908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.408480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.409431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.410376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.411330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2070.412275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:48:58 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c92900000004000000000000000000000000000000000000002900000032000000fe880000000000000000000000000101", @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x30b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x810, 0xffffffffffffffff, 0x10000000) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x539002, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0xbe, 0x79, 0x3f, 0xff, 0x0, 0x7, 0x2f621, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x52, 0x2, @perf_config_ext={0x5, 0x73}, 0x2110, 0x3, 0x807, 0x8, 0x9, 0x82c, 0x2, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000280)="40a73c4c44d134151d26000000000000000000", 0xfffffffa, 0x0, 0x1, {0x3}}, 0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105142, 0x1c5) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x20, 0x2, 0x1, 0x5, 0x0, 0xffffffff, 0x20340, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0xffff}, 0x11010, 0x8, 0xfff, 0x3, 0x0, 0xffffa23a, 0x8, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) accept$unix(r2, 0x0, &(0x7f0000000240)) mount$bind(&(0x7f0000000340)='./file2\x00', &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0), 0x308a400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x220001, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000680)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 00:48:58 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:58 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 20) 00:48:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2c030000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:59 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x640683, 0x0) pwritev2(r0, 0x0, 0x0, 0x1, 0xff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4a40, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000180)='}[![]:)\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000010, 0xffffffffffffffff, 0x8000000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) readahead(0xffffffffffffffff, 0x400, 0x40) r4 = dup2(r3, r1) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000100)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) 00:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 1) [ 2082.534526] FAULT_INJECTION: forcing a failure. [ 2082.534526] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.536468] CPU: 1 PID: 11892 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2082.537081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.537801] Call Trace: [ 2082.538064] dump_stack+0x107/0x167 [ 2082.538393] should_fail.cold+0x5/0xa [ 2082.538723] ? create_object.isra.0+0x3a/0xa20 [ 2082.539137] should_failslab+0x5/0x20 [ 2082.539464] kmem_cache_alloc+0x5b/0x310 [ 2082.539859] ? mark_held_locks+0x9e/0xe0 [ 2082.540222] create_object.isra.0+0x3a/0xa20 [ 2082.540610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2082.541062] __kmalloc+0x16e/0x390 [ 2082.541406] ext4_find_extent+0xa3d/0xd30 [ 2082.541783] ext4_swap_extents+0x361/0x14c0 [ 2082.542157] ? mext_check_coverage.constprop.0+0x2a4/0x3e0 [ 2082.542642] ? kfree+0xd7/0x340 [ 2082.542983] ? ext4_get_es_cache+0x600/0x600 [ 2082.543364] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2082.543803] ext4_move_extents+0x2566/0x3050 [ 2082.544199] ? find_held_lock+0x2c/0x110 [ 2082.544551] ? lock_acquire+0x197/0x470 [ 2082.544893] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2082.545393] ? lock_release+0x680/0x680 [ 2082.545743] ? __fget_files+0x296/0x4c0 [ 2082.546107] __ext4_ioctl+0x302e/0x4190 [ 2082.546456] ? ext4_reset_inode_seed+0x450/0x450 [ 2082.546874] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2082.547393] ? find_held_lock+0x2c/0x110 [ 2082.547762] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2082.548261] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2082.548717] ? do_vfs_ioctl+0x283/0x10d0 [ 2082.549107] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2082.549565] ? generic_block_fiemap+0x60/0x60 [ 2082.549975] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2082.550435] ? selinux_file_ioctl+0xb6/0x270 [ 2082.550830] ? __ext4_ioctl+0x4190/0x4190 [ 2082.551236] __x64_sys_ioctl+0x19a/0x210 [ 2082.551586] do_syscall_64+0x33/0x40 [ 2082.551951] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2082.552404] RIP: 0033:0x7fcf117eeb19 [ 2082.552722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.554450] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.555117] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2082.555733] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2082.556346] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2082.556970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2082.557590] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2082.568626] FAULT_INJECTION: forcing a failure. [ 2082.568626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2082.569800] CPU: 1 PID: 11893 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2082.570386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.571108] Call Trace: [ 2082.571342] dump_stack+0x107/0x167 [ 2082.571671] should_fail.cold+0x5/0xa [ 2082.572015] _copy_from_user+0x2e/0x1b0 [ 2082.572363] __ext4_ioctl+0x2766/0x4190 [ 2082.572704] ? ext4_reset_inode_seed+0x450/0x450 [ 2082.573112] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2082.573603] ? find_held_lock+0x2c/0x110 [ 2082.573966] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2082.574460] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2082.574946] ? do_vfs_ioctl+0x283/0x10d0 [ 2082.575297] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2082.575791] ? generic_block_fiemap+0x60/0x60 [ 2082.576180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2082.576600] ? selinux_file_ioctl+0xb6/0x270 [ 2082.577022] ? __ext4_ioctl+0x4190/0x4190 [ 2082.577384] __x64_sys_ioctl+0x19a/0x210 [ 2082.577738] do_syscall_64+0x33/0x40 [ 2082.578073] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2082.578548] RIP: 0033:0x7ff84abb9b19 [ 2082.578907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.580483] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.581193] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2082.581816] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2082.582429] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2082.583060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2082.583674] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 00:48:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2e000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:59 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080)={[{@noload}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xbcd7, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="c95991e71a2683681f4547dd65591d68085d0ce454970441fbb1a465bebac720013909a499f4a5f192c61b5c798fa2edff8693dfe6b1f1f563c077cc92e59754f09f265d5845628d0cc69fa58c2e5c378e65eb0f983d4eceea77b9313daedcf152fbd21988b567072fecb4e9c8e2c3fc8db7c14fc2f768b3b4d8c2", 0x7b, 0x6}, {&(0x7f0000000200)="75f46a73e0ec3b2efd95c9a5603286899240ac3df36ba6ccaa679eda6ab4979e9012553120ba06e2459967968a837a56681d9d15633f19af4e21a1f5d7466bdc2db25181d043806df6ea3502142221c5be60ed6849c00748fd843804d89d29a5797a6a3a20bbcb79e9f115300e25b688078e4041d90f73085f8febdb654140ce7d90c69c0ce047d3bf89c34a7470bcb0dabbdcb3f2358a9d73de78625adb7d4f42440b5ab42d91b68d1241918423a80ba7291c2193eb22eed371e5671e5083db01d00536f46ae5e7b9a0", 0xca, 0x7}, {&(0x7f0000000300)="9cfe09bf46e74671c5519ec4e1fdbbe5c482d3bacf5a9e5ef433b4f5d16bbed003086d4b1540a2264e8085a0474ec6ab64ece947cde96d7ad9e7c3ce0f9b8c356897bacb2ec56a53ba88d61a21a117219e", 0x51, 0x8}, {&(0x7f0000000380)="33139aa2e69ac655", 0x8, 0x869}], 0x881000, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@noload}], [{@smackfsfloor={'smackfsfloor', 0x3d, '('}}, {@euid_lt={'euid<', 0xee01}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise}, {@uid_lt={'uid<', 0xee00}}]}) mount(&(0x7f0000000580)=@sr0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='hfsplus\x00', 0x1000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat(r0, &(0x7f0000000680)='./file0\x00', 0x200000, 0x148) 00:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 2) 00:48:59 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:48:59 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:48:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 21) [ 2082.925557] FAULT_INJECTION: forcing a failure. [ 2082.925557] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.926965] CPU: 1 PID: 11919 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2082.927549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.928260] Call Trace: [ 2082.928501] dump_stack+0x107/0x167 [ 2082.928840] should_fail.cold+0x5/0xa [ 2082.929193] ? ext4_find_extent+0xa3d/0xd30 [ 2082.929560] should_failslab+0x5/0x20 [ 2082.929891] __kmalloc+0x72/0x390 [ 2082.930176] ext4_find_extent+0xa3d/0xd30 [ 2082.930538] ext4_move_extents+0xb51/0x3050 [ 2082.930936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2082.931376] ? find_held_lock+0x2c/0x110 [ 2082.931705] ? lock_acquire+0x197/0x470 [ 2082.932052] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2082.932483] ? lock_release+0x680/0x680 [ 2082.932837] ? __fget_files+0x296/0x4c0 [ 2082.933170] __ext4_ioctl+0x302e/0x4190 [ 2082.933508] ? ext4_reset_inode_seed+0x450/0x450 [ 2082.933911] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2082.934362] ? find_held_lock+0x2c/0x110 [ 2082.934732] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2082.935227] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2082.935644] ? do_vfs_ioctl+0x283/0x10d0 [ 2082.936003] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2082.936459] ? generic_block_fiemap+0x60/0x60 [ 2082.936833] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2082.937264] ? selinux_file_ioctl+0xb6/0x270 [ 2082.937643] ? __ext4_ioctl+0x4190/0x4190 [ 2082.937983] __x64_sys_ioctl+0x19a/0x210 [ 2082.938327] do_syscall_64+0x33/0x40 [ 2082.938635] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2082.939116] RIP: 0033:0x7ff84abb9b19 [ 2082.939409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2082.940956] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.941582] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2082.942167] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2082.942753] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2082.943360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2082.943950] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 00:48:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2f000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:48:59 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f00000000c0)={r7, r8+60000000}, 0x1, 0x0, 0x1, {0x0, r9}}, 0x1) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2082.992647] FAULT_INJECTION: forcing a failure. [ 2082.992647] name failslab, interval 1, probability 0, space 0, times 0 [ 2082.995147] CPU: 0 PID: 11922 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2082.996268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2082.997511] Call Trace: [ 2082.997922] dump_stack+0x107/0x167 [ 2082.998477] should_fail.cold+0x5/0xa [ 2082.999069] ? ext4_find_extent+0xa3d/0xd30 [ 2082.999724] should_failslab+0x5/0x20 [ 2083.000301] __kmalloc+0x72/0x390 [ 2083.000834] ext4_find_extent+0xa3d/0xd30 [ 2083.001457] ? kfree+0xd7/0x340 [ 2083.001962] ext4_swap_extents+0x321/0x14c0 [ 2083.002611] ? ext4_dirblock_csum_verify+0x2b8/0x4b0 [ 2083.003393] ? ext4_get_es_cache+0x600/0x600 [ 2083.004067] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2083.004838] ext4_move_extents+0x2566/0x3050 [ 2083.005534] ? find_held_lock+0x2c/0x110 [ 2083.006161] ? lock_acquire+0x197/0x470 [ 2083.006765] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2083.007565] ? lock_release+0x680/0x680 [ 2083.008171] ? __fget_files+0x296/0x4c0 [ 2083.008790] __ext4_ioctl+0x302e/0x4190 [ 2083.009403] ? ext4_reset_inode_seed+0x450/0x450 [ 2083.010114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2083.010906] ? find_held_lock+0x2c/0x110 [ 2083.011538] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2083.012394] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2083.013172] ? do_vfs_ioctl+0x283/0x10d0 [ 2083.013779] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2083.014563] ? generic_block_fiemap+0x60/0x60 [ 2083.015251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2083.016000] ? selinux_file_ioctl+0xb6/0x270 [ 2083.016663] ? __ext4_ioctl+0x4190/0x4190 [ 2083.017291] __x64_sys_ioctl+0x19a/0x210 [ 2083.017900] do_syscall_64+0x33/0x40 [ 2083.018463] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2083.019233] RIP: 0033:0x7fcf117eeb19 [ 2083.019799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.022506] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2083.023652] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2083.024716] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2083.025782] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.026847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2083.027927] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 3) [ 2083.052604] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2083.052604] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2083.052604] [ 2083.064089] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2083.066162] EXT4-fs (loop1): group descriptors corrupted! 00:48:59 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2083.130042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.130511] print_req_error: 22 callbacks suppressed [ 2083.130522] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.132429] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.133342] buffer_io_error: 6 callbacks suppressed [ 2083.133349] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2083.135581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.136047] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.137507] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.138345] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2083.139646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.140117] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.141107] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.141925] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2083.143929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.144565] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.145641] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.146484] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2083.147220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.147633] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.149611] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2083.150430] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2083.152376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.152893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.153459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.155005] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2083.155585] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2083.156190] Buffer I/O error on dev loop4, logical block 2096903, async page read 00:48:59 executing program 0: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1b, r0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) syz_io_uring_setup(0x49ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r9 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r9, &(0x7f0000000040)={0x11, 0x1b, r11, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="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", 0x1000}], 0x2, &(0x7f0000002100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x40}}, {{&(0x7f0000002140)={0xa, 0x4e20, 0x5, @private0, 0x6}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002180)="1026425478490d8e5301d4585beba7f186af0e8ddd8ab106bad424a7e0654d250ee63a7b19a1c8a0a60cd9ee91204c10ce915c575f5ebdebf30d12a4eabb2dd9a371bcdaaf77d9f8e42fee531c6feb2ab66fa461f9055bf4a31a204eaac11443948c9616ac1400eed19c306847bf720d00375c6941a512e5c83ff4ce4c65612ea77d8ad5260050fd48628ea6eded542dcf77b722acb7804eaec6d9d396069e0d02eb3dc507b79c48d867c8978a1ef67eb5896eacb60f43708fb72d70ae231c664f1cf2e8b22487267648", 0xca}, {&(0x7f0000002280)="5374f36eb0e06f29558c2b04b679e6d05488a88933413d94abc67fe93605495119d3fc97d00d20a2b0b9eee03607a61c0678260a05f1e583c566f4467273fc9e2b35aa05110a0f3126806f71d8c650c512188c286e8aca8abd721c80d242e434c3b8689171f8c6bdd76e5f8c13530ebac8c886ef909be0d65a9a1ab682953878b5d812d29c5b42c6b94a303d97708628c8081e2880ff96bca63ba5644f2e0e7c2522784d688baac7feed8689eecdb6c5752da2db697b91fb3d1fb24551d17a01feca8aa2f0f961cadee2568fc80470f788", 0xd1}, {&(0x7f0000002380)="2b944bc752e73f32fc0e4a59988258225a7c65d2226002d2da643bf6a6c882d6877eeb9720947095dc407f8b62d3f9970fe21d7cebb5a1faf96c62f1bd18bb8c0d3997b1076a157775b08d55620f86d893462573581eb2f83abda2a9e075cdd13557d855ccaad4014fd744778e262ccca5f49db20419acdffb4690e2a8ed5e9fa75cf594b3ffb6d74f3c6cc532ae6b1d075ae49376f64d49b9ad4fb97c8088bfb989f6830fa28dc4f98a9f7a5565db712e72c182759b33a4febb96f0287fe93914", 0xc1}, {&(0x7f0000002480)="d3489d3112efcb72cfba8ecd370edd206eadf67988f60e73c94a305e87e4a54c909f949263dd5fd71285fb3337c0daf0b82813bf57f5bb362fd76dfb5ecaa8d8a4d6c6857d1b20dfe3b2b982668c8e5022478a59534bb90c6edb17e5b971297ad310329e0342acfa68b3c9b932f1c090aa055cb08aab8de5ec917b7721e5091ecce8fe04889f5a5045ebe733", 0x8c}, {&(0x7f0000002540)="4e315518dc51484694f36f117115584ddd10a1f619c1d248c09f5f2a5740e20de7993d398c2fc0856794f57548bf8da7c1392b8ff5c12217e4579b5b0e7f16864b20de046c50350dc14edb379f5f44ee8f5af5e0834e02ff698d791858ccda2ba73cfe83c4cba0a6a6f37b6fe06213f686e86ae2a618fb59c226d384fa432322f90c43b976f863b4de8a5ce3fd5801989a938a2dc8bc6d2ad22c32dba2564ea17cbbf02ba7e6719728a098758bce1896358ad2df95548f6e710e42aa0957a1906222d4145df50444e8e801da3a81fc49358cc7abd98762c8de2ee728807163392768599a206c", 0xe6}], 0x5, &(0x7f00000026c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffff84}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6c, 0x4, 0x2, 0x20, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0x3c}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf167}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x98}}, {{&(0x7f0000002780)={0xa, 0x4e21, 0x0, @private1, 0x7}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000027c0)="2589612413d5fc1228694716c88db53656791cde8b70d0d5b3cbe584b747ad0cee1b41f1ace0de5a4b4eb0a52ff8511100d29b0f1735cd1f4814d500c5fb9f9449ddeca8de02af84722c5639b7d6f9c21a09b36428e78cf679ea583c950e90e0d4e7760c26a752b4f1952b4dd1b11f49b4253286eced8d7b09a3fe909b0cd0be77de50eb8097f0f77bbefa2a2d64abc006274dc17614a377cf12485e1cb7e2824133cf96d591295f45b06416afcac6fcecfefecc911aa7233ec6f20fb4a427c41ca2a33d3bdc631d739236195b53bec7a8f5e228d97b940dda129f", 0xdb}, {&(0x7f00000028c0)="80bfcbdb60a5a811ba2e314bde17f6ff8170b078132af731a253", 0x1a}, {&(0x7f0000002900)="96bd2433d9bb5dc15a943879b605ae6b34fbd77b75dfae29bc7458c1e3466c992d64fae3ce12a7c263727edfe146c9243262c7e9a426afed89b24b4008b28b30bd8dc9368b9d2f932177ac2a436807a27cc2ff262f8a0bff048d359e0b93f242dc85d8b5fe2f6b3fc02577c2c395d82e46ccef04716322ea7675b4206b0dbe6f57f40dafa20d80c5d82ddf69fc5c6cb7f4168476b2658fdaaaada66a75f2bfe11d2439", 0xa3}, {&(0x7f00000029c0)="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", 0x1000}], 0x4, &(0x7f0000003a00)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x6, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x90}, @padn, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x20}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2f, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0xff}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x40, [0x0, 0xda0, 0x3, 0x80000001]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000003ac0)="a48692c2f62ed5b19d5649e4a1eb95c67614f5e50c3375505bd3b0", 0x1b}, {&(0x7f0000003b00)="03daee790e7a9760028ab6cc86892a4b32044c7a48c53319e61e02a02d043c0111ab94c6b26ce09e32743e8c30760cf5ca97235c76abf2268a509548b747c169825927f371c2afbf500e311063b0d525ee0930a63f503c52a033aa12fe477a27e927545d3bde4733682af04baea1ce1377b10c2e072a51992cf57e7675ed19b353cef4fb6940dfefed40c0a3aae5487ab3b37aaa598a47f751bbae407cdefa3985770e05ec3441d34c859387003fbf704f91a0105fbfa2d07ed690b4ef7420e6c532ba52073029df4e9d7404e823a08dd1bbf2f84d7a7a7a4fabcce2c0b4cd364769c23468d230", 0xe7}], 0x2}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003c40)="1f8cb378ce251ae9b93501f3ba832654966c4c9bb0d72ae497f82818ea560a05c8e4bd68239f6f030987547d0da03c0c99834e8b3d7b89e16f19e11bd7630510d1e0dba5bd0a98c3ac0d633242cf1ade84be72af8d569cef0590cf7915cee512c9fd0eef5a2ecf5340e43b86f1c596fa2db4a23f7ae41c6f4b9606014e2e5753bf113a44", 0x84}, {&(0x7f0000003d00)="d4bacbcc1975f16b9fa32db9afc28253", 0x10}], 0x2, &(0x7f0000003d80)=[@hoplimit_2292={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r0}}}], 0x40}}, {{&(0x7f0000003dc0)={0xa, 0x4e24, 0x7f, @remote, 0x1f}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000003e00)="a6bf6bbae01f4dbe1c97372174544d7ac89044c971c178e12c8a59f6202c3a26d735f319c7659005e21d4810440c8181b38e9e27bd012eee6b9a932bcfcccbd3c4bd3314af267ce1d2771f5502b2bf0b39de3a54ede7c6e863438fead9f5727d4249b3e226fde0ca", 0x68}, {&(0x7f0000003e80)="a12c0035f34920d0cccfc0d2e7ef0ccf976af2dba40ef4ca9bfaf9ebc6845738c4c41504f530bb81043f755a30ea57d6a81b03944d83a354c59faa56d4fc55d700bf7444122e85c544c560746c549eb6015382842b80f28dfd35d89273796e2ce0f309e9c2e51d332fbc6013ca0397c8140431e4456059e40ae2d823c4cc15772456664dc0d251afca3f716ad45d5e38bfa95163950993e1765cb50328774379fe8f3ec3b4c65cf2f06c50859bfbb48008e863c43b4bdf6225e87c758e1812d234dd677048f709c70f828405c77a73844978af9969cbae72afb958db436aa1b0b9f33bd8", 0xe4}, {&(0x7f0000003f80)="6e49c7e81301ac0aa1bf64b8bdad3bea556b53f9e0e0467482e7aa02efef7cb5b8f34822728a266924fd8cf5db73b0f26ef34498761ae77bbb7350dfdefb222d5791f077495c4c2d8ce5f4cb385345b01d9e946265e2ef058ae5399c81cb1eb3ea76b3887f64f0ed4283779dfe22f57ce78282e898689fcb6c16a3e4565823e611a899429f8c077fa001998183fb4bdb79fd4106c117bb9c9639d18432e19fc6280641ef0da60330593879941cf7d01e1c8102e4aae7748d925515ed1e9db1acb3fc1922cd3f4068a8369aeab046ad8c615629b021599a86c51d459a9a5a9e1e6e9bbfb2", 0xe4}, {&(0x7f0000004080)="2e0d49a1ac2e5045cbdcc40f3ac32a0137f8c72f9ed5f7baa4bb60d80126627e49b0b1a35ca47eff3b9e4f6915a72f99e32b1514b232853e7fb4c72dccdb0c6b9f6aa313e428c72570cf8058d92855a76e7a690a0e778f014e192bf57287e1b47ba78a401bb3a3b9564206b86c581bd36b828e97b3d772327f040a855b4bc8257eef64daab19c315d296107493537bbbd48e6e83ac904743c648b64255d087756f63d6087e8964", 0xa7}], 0x4}}, {{&(0x7f0000004180)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}, 0x1c, &(0x7f0000005280)=[{&(0x7f00000041c0)="3d65d1b584f38bc7b197c409fbda3019adbda74a7d9562e2e27651ff862a8ee6d799189e8f3fa9e8d5ab9646ad6c489b4083ac9664e1bc1db63d7a24f0639bc94f2ae0fbb482295173e277736e1f5363b0ee6c01a2f4961c367a0f20893af6a1189333df8b9c1a1716db299da5f8473ff067106adaf22b0a9feeb0a2e419ec1479d9ee7e64a0a59d43a25bf41f3dd4480a832d20d0ec7f51045ea0a2c82bb7f218a377423d74fed283d0b5f18365359ac6", 0xb1}, {&(0x7f0000004280)="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", 0x1000}], 0x2}}, {{&(0x7f00000052c0)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000006840)=[{&(0x7f0000005300)="c4b6559fe49dd75c78c717684a28fe6ce5ce1a255bef8f40d5fa76d4682c8dc99f666c21ed7a537d57607619bf18691208a354eefb3bc2ec305b2e999d94e2e95f38135dcc44c31c19f4e46f60d669073a473248cf72ffc33c43d7d71d726603c1884cffd1345af4ce6403d036f59ac044dd15aa33e87e92887b68f15ec6a4690237c33dc67f3c32fb411908c0b7fca9ea2ad23ef7e8cad7d00bd713b5449596762382958771a647e46526ccc751ed27fb914314", 0xb4}, {&(0x7f00000053c0)="438e73ba173e2b728afb9b527bdec36aeb8b36ef1e57c9fb26553c5ff223b22d8c3f1de2cfeae5d5f02a6e49e1dff6", 0x2f}, {&(0x7f0000005400)="c0747969c2cda62d779733e8c6c39d132a056794c02a1541965bfc614ed2e339c19e9fb47f6a04ddd8c1ab866c221ee8b2b84cb919aee6e65b2989abe892acff34c52dd09f600dae060c17705da955a35db1eb7516245e90d4c26e187339c01d89f37f7f006c096f1cfe34ef567fea50b6664c90f4cc1638d5036745c319ef25245e20e842ee284a9d9f73b2e4b3a16a9570df45a8b48cbd4b335df8708fa59bddf4db95c2cfb7c4b36092a4089332ba99dcdcfa62e982930012551de77e7d9bac", 0xc1}, {&(0x7f0000005500)="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", 0x1000}, {&(0x7f0000006500)="dfdb9af94220b4093f005647240472cf6db11cbf878caf09f3894f88b7976c3bd6c9d97ee921e888a94b43f1dbc5a16e4d9bf147ba95c4f6b9f16e0df55a80f350d7ff4d121200639b39b5877518486913b0e72b8d3f0595368fa71ceb2374ee729e922b959f9dda99c76a64744247fa53feb948618b47a75547af61321936910240cab350dd82c1cc817f466670d6a9d11a", 0x92}, {&(0x7f00000065c0)="c9b6a999a0bf2777c7624a64a4fedc20ac1a19ef84ade6e146b2ff70cc8e8a0b75864b8fe24449d0e727a7ad2950e1748f9fc3bd977c42e2c050ad64fed1664c20d6ee4975a27204aca3b7f0b82efb63f47b5d4b285dd0ffe50748227d798212fb565d02b71ba675f16e9414aceacc912f6637a19265a952b43b05d4d7b8eb40a1449b5d84997d6e5294809fa6b0092cd6c9c37163a181f905f8b6d529438a7310b4c295960ae489c4753206a6bfc2801aea4789273ee1bcc373c7381c314724a64e34a04fa0ea", 0xc7}, {&(0x7f00000066c0)="620f89c17aa754bd3ea560e5ae7907c4a86fe82020d0cd71fd74380db07ab24e51a6e01f3f8f6c39f3cbd36ba53d6c7ad5095fed506df3bc0dd26ee31d86b69d0a1ced43e02af776a38d40a59f5d72582665c97a00d2db76eed736cbd3a0d7567cd18480dbe839184f66a2c7e1634f8b2c84d505381e0be1b9ca3a8ac345d0e6a8183679b32a69c1b8de05ee0cb8682529063be479de9dbc48dc97ebc5857e6a38e1", 0xa2}, {&(0x7f0000006780)="96f3ba15581d6a0dbef88b134fa3a9de81d082b90ed1a0b16c548ade9667506e111d6d312a06829d5bbd243db5a10870ead6031261fdcac3511f9fab848954ca8ea6399775b50ec62063da8cebd2ddb67a492ea84c9d3804d4a25653a3d2167367d8af8e34f696c4ef6ff410142c494907575db1c8f4e89d45e6439a7249670a41b9561b49b829e9751c", 0x8a}], 0x8, &(0x7f00000068c0)=[@tclass={{0x14}}, @tclass={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts={{0x188, 0x29, 0x36, {0x3c, 0x2d, '\x00', [@generic={0x5, 0xb1, "bb0318d01f2f8cac32345d91c3d160cac4f8f50f9f70b50fb5419b4015e8d2a97a8acde16730e16d961603f9fb9ae18e6d4f895615a0ccad3a4980f1341b7ab7c3685e407ce1135a599d2d65d41ab38acd04180526f8b6accd8a7dcd0b387edb0570a5ce001c3e49f79d663af4e5a0393c9f841e6d219440508b138272bc02eedc68ce9c8fe70bb6a7cd788649fe7415f6e39c6c6565334e3abfcec9a85967c228fd0c67c6e4043b4e905b83b78ff7ef39"}, @calipso={0x7, 0x58, {0x0, 0x14, 0x1, 0x8, [0x5128, 0x5, 0x1, 0x9, 0x5d6, 0x1, 0x3, 0xd4ae, 0x5, 0x7f]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x50, {0x0, 0x12, 0xf9, 0xc1, [0xfffffffffffffffb, 0x9, 0x4, 0x1, 0x1, 0x2, 0xd, 0x491, 0x3]}}, @ra={0x5, 0x2, 0x9}, @pad1]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, @mcast2]}}}, @rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x1, 0x9, 0x0, [@private2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x317}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb0f8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x2a0}}, {{&(0x7f0000006b80)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000006d40)=[{&(0x7f0000006bc0)="139249ddeb88a25a80f95d59b89e197c43a24692e2b3203f689a8fa1db64b3df43ee3f927acacf7382dd9e13956bcfc23bc1a535c0341f4d22e37ccddf2dc80243e921a319816281", 0x48}, {&(0x7f0000006c40)="a0c019bd16887839f91e62d5f12267e8895327f0407ac6286afd52b7aa5640d7ec3eac626273ea455b85c58617838f3727f5b528bddc22ed191aef5a7f332cb7e371ac683213ff2510b2739eb0b09308e72262bbfec6411ef39b5b03649f29f62712769ed5c784e19bbdd768b9c59eb6d5f890005c38f605104858a45a96ac9ccf7ed97306760b2fda2d68b3bee98502bcf0b87a656b0e80739897ed43f5fc15a7fccc8374cd102983839798da19abfa87e9fbae4ba2f9f67f68df8374c0cd7b9a63f38f8cc7ee97ba82ba88bf99caf1fac0f392fe1c7cdfe617002141d3a8ea1ab45ed670e132cba8611759b77f39846b", 0xf1}], 0x2, &(0x7f0000006d80)=[@rthdr={{0x28, 0x29, 0x39, {0x62, 0x2, 0x2, 0x6, 0x0, [@empty]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r11}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x62, 0x8, 0x0, 0x3, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x100}}], 0x9, 0x10000) setrlimit(0xd, &(0x7f0000000040)={0x8}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 2083.285479] FAULT_INJECTION: forcing a failure. [ 2083.285479] name failslab, interval 1, probability 0, space 0, times 0 [ 2083.287558] CPU: 0 PID: 11933 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2083.288619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2083.289874] Call Trace: [ 2083.290299] dump_stack+0x107/0x167 [ 2083.290882] should_fail.cold+0x5/0xa [ 2083.291483] ? create_object.isra.0+0x3a/0xa20 [ 2083.292178] should_failslab+0x5/0x20 [ 2083.292758] kmem_cache_alloc+0x5b/0x310 [ 2083.293375] create_object.isra.0+0x3a/0xa20 [ 2083.294042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2083.294821] __kmalloc+0x16e/0x390 [ 2083.295378] ext4_find_extent+0xa3d/0xd30 [ 2083.296024] ext4_move_extents+0xb51/0x3050 [ 2083.296703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2083.297503] ? find_held_lock+0x2c/0x110 [ 2083.298129] ? lock_acquire+0x197/0x470 [ 2083.298735] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2083.299539] ? lock_release+0x680/0x680 [ 2083.300156] ? __fget_files+0x296/0x4c0 [ 2083.300780] __ext4_ioctl+0x302e/0x4190 [ 2083.301403] ? ext4_reset_inode_seed+0x450/0x450 [ 2083.302120] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2083.302928] ? find_held_lock+0x2c/0x110 [ 2083.303565] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2083.304436] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2083.305221] ? do_vfs_ioctl+0x283/0x10d0 [ 2083.305838] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2083.306631] ? generic_block_fiemap+0x60/0x60 [ 2083.307326] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2083.308076] ? selinux_file_ioctl+0xb6/0x270 [ 2083.308752] ? __ext4_ioctl+0x4190/0x4190 [ 2083.309390] __x64_sys_ioctl+0x19a/0x210 [ 2083.310011] do_syscall_64+0x33/0x40 [ 2083.310583] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2083.311372] RIP: 0033:0x7ff84abb9b19 [ 2083.311943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2083.314694] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2083.315853] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2083.316934] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2083.318005] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2083.319088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2083.320166] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 [ 2083.571364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.571906] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2083.572585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.573053] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2083.576809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.577317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.577838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.578336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.578853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2083.579363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:49:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 22) 00:49:13 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 4) 00:49:13 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f00000000c0)={r7, r8+60000000}, 0x1, 0x0, 0x1, {0x0, r9}}, 0x1) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:49:13 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffff001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) socketpair(0x21, 0x4, 0xfffffff7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000940)={{r3}, 0x0, 0x1a, @inherit={0x60, 0x0}, @subvolid=0x4}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c00, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES32=r5, @ANYRES32=r5, @ANYRES16=r4], 0x98a) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = getpgrp(0x0) pidfd_open(r9, 0x0) fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x6, 0xff, r9}) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000100000003000000030000000220000001000100060000000700000001000080"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) unshare(0x0) 00:49:13 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:13 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) [ 2096.733488] FAULT_INJECTION: forcing a failure. [ 2096.733488] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.735677] CPU: 0 PID: 11954 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2096.736756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.737282] FAULT_INJECTION: forcing a failure. [ 2096.737282] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.738021] Call Trace: [ 2096.738052] dump_stack+0x107/0x167 [ 2096.738082] should_fail.cold+0x5/0xa [ 2096.741281] ? ext4_find_extent+0xa3d/0xd30 [ 2096.741953] should_failslab+0x5/0x20 [ 2096.742582] __kmalloc+0x72/0x390 [ 2096.743151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2096.743962] ext4_find_extent+0xa3d/0xd30 [ 2096.744606] ext4_swap_extents+0x361/0x14c0 [ 2096.745272] ? ext4_dirblock_csum_verify+0x2b8/0x4b0 [ 2096.746066] ? ext4_get_es_cache+0x600/0x600 [ 2096.746741] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2096.747653] ext4_move_extents+0x2566/0x3050 [ 2096.748567] ? mark_held_locks+0x9e/0xe0 [ 2096.749349] ? lock_acquire+0x197/0x470 [ 2096.750124] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2096.751136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.752129] ? trace_hardirqs_on+0x5b/0x180 [ 2096.752965] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2096.753847] ? mnt_want_write_file+0x2dd/0x5f0 [ 2096.754573] ? mnt_want_write_file+0x30a/0x5f0 [ 2096.755330] __ext4_ioctl+0x302e/0x4190 [ 2096.755961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2096.756781] ? ext4_reset_inode_seed+0x450/0x450 [ 2096.757584] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2096.758563] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2096.759471] ? do_vfs_ioctl+0x283/0x10d0 [ 2096.760111] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2096.760921] ? generic_block_fiemap+0x60/0x60 [ 2096.761650] ? clockevents_program_event+0x131/0x360 [ 2096.762556] ? selinux_file_ioctl+0xb6/0x270 [ 2096.763275] ? __ext4_ioctl+0x4190/0x4190 [ 2096.763919] __x64_sys_ioctl+0x19a/0x210 [ 2096.764543] do_syscall_64+0x33/0x40 [ 2096.765166] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2096.765956] RIP: 0033:0x7fcf117eeb19 [ 2096.766528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.769364] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.770524] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2096.771618] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2096.772734] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.773819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2096.774897] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2096.776122] CPU: 1 PID: 11957 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2096.777208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.778463] Call Trace: [ 2096.778879] dump_stack+0x107/0x167 [ 2096.779448] should_fail.cold+0x5/0xa [ 2096.780042] ? jbd2__journal_start+0x190/0x7e0 [ 2096.780744] should_failslab+0x5/0x20 [ 2096.781329] kmem_cache_alloc+0x5b/0x310 [ 2096.781971] jbd2__journal_start+0x190/0x7e0 [ 2096.782650] __ext4_journal_start_sb+0x214/0x390 [ 2096.783391] ext4_move_extents+0x10bb/0x3050 [ 2096.784099] ? find_held_lock+0x2c/0x110 [ 2096.784738] ? lock_acquire+0x197/0x470 [ 2096.785350] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2096.786154] ? lock_release+0x680/0x680 [ 2096.786783] ? __fget_files+0x296/0x4c0 [ 2096.787417] __ext4_ioctl+0x302e/0x4190 [ 2096.788046] ? ext4_reset_inode_seed+0x450/0x450 [ 2096.788771] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2096.789576] ? find_held_lock+0x2c/0x110 [ 2096.790220] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2096.791107] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2096.791894] ? do_vfs_ioctl+0x283/0x10d0 [ 2096.792515] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2096.793321] ? generic_block_fiemap+0x60/0x60 [ 2096.794010] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2096.794767] ? selinux_file_ioctl+0xb6/0x270 [ 2096.795457] ? __ext4_ioctl+0x4190/0x4190 [ 2096.796092] __x64_sys_ioctl+0x19a/0x210 [ 2096.796719] do_syscall_64+0x33/0x40 [ 2096.797288] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2096.798073] RIP: 0033:0x7ff84abb9b19 [ 2096.798644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.801429] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.802590] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2096.803677] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2096.804762] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.805846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.806930] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 [ 2096.900045] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2096.900045] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2096.900045] 00:49:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 23) [ 2096.925426] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2096.927539] EXT4-fs (loop1): group descriptors corrupted! 00:49:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:49:13 executing program 0: syz_mount_image$nfs4(&(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6273636b90794063248187e0c3fab06e13931e0b0d67c4adcf8e9f80df1c3c3e683b597b092bd8a66ad5430dba2a99c68c7d7e3bdcdd9fb00b1239fc2d9d91fbda62643f4fab4c557dc29614f75b92a275f5d5fbae811f1adc2f0603"]) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1000, 0x800}}, './file0\x00'}) 00:49:13 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:49:13 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 5) [ 2097.169239] nfs4: Unknown parameter 'bscky@c$n gĭώ<>h;Y{ +ئjC*ƌ}~;ݟ 9-bd?OLU}–[u/' [ 2097.174111] nfs4: Unknown parameter 'bscky@c$n gĭώ<>h;Y{ +ئjC*ƌ}~;ݟ 9-bd?OLU}–[u/' 00:49:13 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c9290000000400"/28, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2097.208380] FAULT_INJECTION: forcing a failure. [ 2097.208380] name failslab, interval 1, probability 0, space 0, times 0 [ 2097.210301] CPU: 0 PID: 11977 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2097.211310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2097.212497] Call Trace: [ 2097.212893] dump_stack+0x107/0x167 [ 2097.213424] should_fail.cold+0x5/0xa [ 2097.213980] ? ext4_find_extent+0xa3d/0xd30 [ 2097.214653] should_failslab+0x5/0x20 [ 2097.215214] __kmalloc+0x72/0x390 [ 2097.215739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2097.216478] ext4_find_extent+0xa3d/0xd30 [ 2097.217112] ext4_swap_extents+0x361/0x14c0 [ 2097.217738] ? ext4_dirblock_csum_verify+0x2b8/0x4b0 [ 2097.218484] ? ext4_get_es_cache+0x600/0x600 [ 2097.219190] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2097.219951] ext4_move_extents+0x2566/0x3050 [ 2097.220619] ? find_held_lock+0x2c/0x110 [ 2097.221223] ? lock_acquire+0x197/0x470 [ 2097.221803] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2097.222562] ? lock_release+0x680/0x680 [ 2097.223169] ? __fget_files+0x296/0x4c0 [ 2097.223769] __ext4_ioctl+0x302e/0x4190 [ 2097.224366] ? ext4_reset_inode_seed+0x450/0x450 [ 2097.225062] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2097.225825] ? find_held_lock+0x2c/0x110 [ 2097.226435] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2097.227273] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2097.228017] ? do_vfs_ioctl+0x283/0x10d0 [ 2097.228607] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2097.229364] ? generic_block_fiemap+0x60/0x60 [ 2097.230014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2097.230734] ? selinux_file_ioctl+0xb6/0x270 [ 2097.231395] ? __ext4_ioctl+0x4190/0x4190 [ 2097.232006] __x64_sys_ioctl+0x19a/0x210 [ 2097.232599] do_syscall_64+0x33/0x40 [ 2097.233143] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2097.233890] RIP: 0033:0x7fcf117eeb19 [ 2097.234431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2097.237070] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2097.238164] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2097.239203] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2097.240218] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2097.241230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2097.242244] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:49:13 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f0000000140)={'trans=virtio,', {[], [{@fowner_lt}, {@measure}]}}) dup(0xffffffffffffffff) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r3, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) creat(&(0x7f0000000100)='./file0\x00', 0x15) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 00:49:13 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 2097.306979] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2097.306979] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2097.306979] [ 2097.332302] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.333998] EXT4-fs (loop1): group descriptors corrupted! [ 2097.436699] FAULT_INJECTION: forcing a failure. [ 2097.436699] name failslab, interval 1, probability 0, space 0, times 0 [ 2097.439023] CPU: 1 PID: 11988 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2097.440074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2097.441314] Call Trace: [ 2097.441745] dump_stack+0x107/0x167 [ 2097.442323] should_fail.cold+0x5/0xa [ 2097.442935] ? create_object.isra.0+0x3a/0xa20 [ 2097.443641] should_failslab+0x5/0x20 [ 2097.444229] kmem_cache_alloc+0x5b/0x310 [ 2097.444851] create_object.isra.0+0x3a/0xa20 [ 2097.445521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2097.446297] kmem_cache_alloc+0x159/0x310 [ 2097.446929] jbd2__journal_start+0x190/0x7e0 [ 2097.447621] __ext4_journal_start_sb+0x214/0x390 [ 2097.448351] ext4_move_extents+0x10bb/0x3050 [ 2097.449046] ? find_held_lock+0x2c/0x110 [ 2097.449682] ? lock_acquire+0x197/0x470 [ 2097.450301] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2097.451122] ? lock_release+0x680/0x680 [ 2097.451738] ? __fget_files+0x296/0x4c0 [ 2097.452365] __ext4_ioctl+0x302e/0x4190 [ 2097.453000] ? ext4_reset_inode_seed+0x450/0x450 [ 2097.453709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2097.454488] ? find_held_lock+0x2c/0x110 [ 2097.455117] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2097.455976] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2097.456760] ? do_vfs_ioctl+0x283/0x10d0 [ 2097.457386] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2097.458177] ? generic_block_fiemap+0x60/0x60 [ 2097.458864] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2097.459621] ? selinux_file_ioctl+0xb6/0x270 [ 2097.460297] ? __ext4_ioctl+0x4190/0x4190 [ 2097.460919] __x64_sys_ioctl+0x19a/0x210 [ 2097.461524] do_syscall_64+0x33/0x40 [ 2097.462081] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2097.462847] RIP: 0033:0x7ff84abb9b19 [ 2097.463430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2097.466199] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2097.467355] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2097.468428] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2097.469506] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2097.470555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2097.471635] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 00:49:14 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) [ 2097.712070] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2097.712070] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2097.712070] [ 2097.722643] 9pnet_virtio: no channels available for device syz [ 2097.735555] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2097.737184] EXT4-fs (loop1): group descriptors corrupted! [ 2097.739161] Process accounting resumed [ 2097.825310] Process accounting resumed [ 2098.146186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.146815] print_req_error: 22 callbacks suppressed [ 2098.146827] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.148575] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.149619] buffer_io_error: 6 callbacks suppressed [ 2098.149627] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2098.154505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.155114] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.156610] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.157901] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2098.161336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.162103] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.163341] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.164648] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2098.166576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.167375] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.170359] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.171636] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2098.172938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.173583] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.174868] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2098.176079] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2098.177827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.178514] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2098.179617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.180402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.183854] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2098.184747] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2098.265862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.266402] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2098.266412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.266487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.267606] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2098.268054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.270038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.270729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.271461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2098.272107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:49:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 24) 00:49:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 6) 00:49:27 executing program 0: setresuid(0xffffffffffffffff, 0xee00, 0x0) r0 = perf_event_open(&(0x7f0000001e40)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/xfrm_stat\x00') perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xa5, 0x9, 0x5, 0x5, 0x0, 0x3, 0x40022, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x4, 0x2}, 0x40, 0x2, 0xbb, 0x5, 0x1, 0x101, 0x0, 0x0, 0x1f, 0x0, 0x2}, r1, 0x4, r0, 0xa) 00:49:27 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:49:27 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:27 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c9290000000400"/28, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:27 executing program 2: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f00000000c0)={r7, r8+60000000}, 0x1, 0x0, 0x1, {0x0, r9}}, 0x1) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 2111.278273] FAULT_INJECTION: forcing a failure. [ 2111.278273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2111.279809] CPU: 1 PID: 12015 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2111.280549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.281393] Call Trace: [ 2111.281684] dump_stack+0x107/0x167 [ 2111.282078] should_fail.cold+0x5/0xa [ 2111.282482] __alloc_pages_nodemask+0x182/0x600 [ 2111.282972] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2111.283602] ? find_get_entry+0x2c8/0x740 [ 2111.284049] ? mark_held_locks+0x9e/0xe0 [ 2111.284465] ? __jbd2_journal_unfile_buffer+0xb0/0xb0 [ 2111.285005] alloc_pages_current+0x187/0x280 [ 2111.285466] __page_cache_alloc+0x2d2/0x360 [ 2111.285920] pagecache_get_page+0x2c7/0xc80 [ 2111.286374] grab_cache_page_write_begin+0x64/0xa0 [ 2111.286884] ext4_move_extents+0x1203/0x3050 [ 2111.287388] ? find_held_lock+0x2c/0x110 [ 2111.287828] ? lock_acquire+0x197/0x470 [ 2111.288246] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2111.288788] ? lock_release+0x680/0x680 [ 2111.289209] ? __fget_files+0x296/0x4c0 [ 2111.289630] __ext4_ioctl+0x302e/0x4190 [ 2111.290055] ? ext4_reset_inode_seed+0x450/0x450 [ 2111.290551] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.291110] ? find_held_lock+0x2c/0x110 [ 2111.291559] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2111.292158] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2111.292695] ? do_vfs_ioctl+0x283/0x10d0 [ 2111.293130] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2111.293667] ? generic_block_fiemap+0x60/0x60 [ 2111.294148] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.294655] ? selinux_file_ioctl+0xb6/0x270 [ 2111.295119] ? __ext4_ioctl+0x4190/0x4190 [ 2111.295567] __x64_sys_ioctl+0x19a/0x210 [ 2111.295995] do_syscall_64+0x33/0x40 [ 2111.296394] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2111.296938] RIP: 0033:0x7ff84abb9b19 [ 2111.297329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.299253] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.300043] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2111.300783] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2111.301537] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.302293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.303047] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 [ 2111.313152] FAULT_INJECTION: forcing a failure. [ 2111.313152] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.315693] CPU: 0 PID: 12011 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2111.317052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.318651] Call Trace: [ 2111.319103] dump_stack+0x107/0x167 [ 2111.319806] should_fail.cold+0x5/0xa [ 2111.320536] ? create_object.isra.0+0x3a/0xa20 [ 2111.321414] should_failslab+0x5/0x20 [ 2111.321979] kmem_cache_alloc+0x5b/0x310 [ 2111.322762] ? mark_held_locks+0x9e/0xe0 [ 2111.323384] create_object.isra.0+0x3a/0xa20 [ 2111.324228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.325053] __kmalloc+0x16e/0x390 [ 2111.325730] ext4_find_extent+0xa3d/0xd30 [ 2111.326355] ext4_swap_extents+0x361/0x14c0 [ 2111.327178] ? ext4_dirblock_csum_verify+0x2b8/0x4b0 [ 2111.327955] ? ext4_get_es_cache+0x600/0x600 [ 2111.328607] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2111.329353] ext4_move_extents+0x2566/0x3050 [ 2111.330240] ? find_held_lock+0x2c/0x110 [ 2111.330851] ? lock_acquire+0x197/0x470 [ 2111.331447] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2111.332219] ? lock_release+0x680/0x680 [ 2111.332817] ? __fget_files+0x296/0x4c0 [ 2111.333427] __ext4_ioctl+0x302e/0x4190 [ 2111.334034] ? ext4_reset_inode_seed+0x450/0x450 [ 2111.334719] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.335491] ? find_held_lock+0x2c/0x110 [ 2111.336095] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2111.336931] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2111.337674] ? do_vfs_ioctl+0x283/0x10d0 [ 2111.338269] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2111.339031] ? generic_block_fiemap+0x60/0x60 [ 2111.339703] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.340425] ? selinux_file_ioctl+0xb6/0x270 [ 2111.341081] ? __ext4_ioctl+0x4190/0x4190 [ 2111.341680] __x64_sys_ioctl+0x19a/0x210 [ 2111.342291] do_syscall_64+0x33/0x40 [ 2111.342835] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2111.343589] RIP: 0033:0x7fcf117eeb19 [ 2111.344137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.346772] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.347875] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2111.348905] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2111.349942] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.350978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2111.352012] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 00:49:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) name_to_handle_at(r4, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x180, 0x6}, 0x80, 0x5}}, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 7) 00:49:27 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) 00:49:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14bf46, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000040)='[][\x00', &(0x7f0000000080)='rfdno', &(0x7f0000000140)='-\x00', &(0x7f0000000180)='9p\x00', &(0x7f0000000200)=':\x00', &(0x7f0000000240)='trans=fd,', &(0x7f00000002c0)='+\xdf\'\x00', &(0x7f0000000300)='wfdno', &(0x7f0000000340)=']\x00'], &(0x7f00000004c0)=[&(0x7f0000000440)='\x00', &(0x7f0000000480)='wfdno'], 0x400) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r2, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:49:27 executing program 7: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8972ae49947d78c9290000000400"/28, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2111.495311] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2111.495311] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2111.495311] [ 2111.520209] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2111.521949] EXT4-fs (loop1): group descriptors corrupted! 00:49:28 executing program 5: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x85c00, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast2}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x3f) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10002200186e2feaffffff000000b519e9d987a476370d7cda76d793c350a8b8652eb33257b18d19a7d8b497556b1aa5f074ff29eefee42eafa6048d820f99040000b596b35c75d32dee8036041650d7390677bc0854d2fd887af0f07371da218078b819e664a626c5102ab15b0730b9e0aa3dc7a1b235ec456504a6a23d960a81ff16e7a3825adb5187280eb28054f2871ab114fa28228e0df71855da85319700af282cf38907617ae41a7b69bfc9780dd8f47b968d65051d3cc9e8e875fa72dfdd5b700da3b06dfbecc3aa2e3a67a4093dc935d7bf8542e3a3393510d0539c84a3ea"], 0x90}}], 0x2, 0x4) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:49:28 executing program 1: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4b, 0x1}, 0x7) flock(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000101007200"/20], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0xa06627ea1324213) r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x8001, 0x125100) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f00000006c0)="4ef03c54c187bc4913de7e058c0798f5c0aa8df411526afb6bb9d2eab679a1f3b347620ae3853f46b36a6fa79ba6c573a66c488c967a88a1bdd26c74cb9aaaca8dd7fb9932bdfce4647dbf180f24ca01493d77a029a4131ddb6029989eb855928d668d256e66041d0f") r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000300)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f61636c2c002f521f20f61c87f70bac7ba081cafeb8d17b1bb38e93664fc41b79550883339acd30c5830fff7fffffffffffffba6c5318a59a50d5717be713fa40a316f9f5250b9bf50ab65005744f40b2712e9e6665950132d9acbf53a60ef6d6793b9382d85299132a2be439253c3e9405891b5d8e57e19f69ea190173e7a2638b895f24"]) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x19c, 0x22, 0x8, 0x70bd2b, 0x7, {0x17}, [@nested={0x17d, 0x72, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@remote}, @generic="e24dd083f13d7bb1fe44d0d72c0a220ff2d8e9a027ff2ff23046147b9ff710ba5447209e86b8fc09ec9dfe2a8576dabdb568efb4c600e089ede549705cd8f3dd6a89c565682bc293145fca9f0d40703c4fff33622365e5570a55edd38f5c068f70bb4d8c76a4c35471542d7ac571bff952", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x5a}, @generic="55c3fe28669479c317097353484a184be6d81268256d0a5a1d7ef4aecb3a2257c409267e", @typed={0x31, 0x13, 0x0, 0x0, @binary="ae9a28463838bc36e936aaaf6d1dc5c3859b6af48cfd5b81b6ffc6e67b56896f3f1b458878cc8d638e8e8273d5"}, @generic="02f7316b04dd1222a516a265dcc7c327b301cc01a1c6aaf7943faa706b7115b5448efcf3a9fa450b7f2d596d966d43672addf9d48920d1e84f6481a7dda0e27cfad6272768f9c53f876b2cae85c9acc814e1a878c01d334dda140eca5b99a447643523cb9483e6a9042ee414c1d8d911ea5278367374fe99e24cb4e8"]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r6 = accept$unix(r5, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) dup3(r0, r6, 0x80000) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x11) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x5, 0x7ff, 0x6f04c327, 0x5, 0x18, 0x1, {0x3, r7}}, 0x80) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/135) 00:49:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000140)={0xfffff800, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) (fail_nth: 25) [ 2111.695344] FAULT_INJECTION: forcing a failure. [ 2111.695344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2111.698457] CPU: 0 PID: 12033 Comm: syz-executor.4 Not tainted 5.10.215 #1 [ 2111.699503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.700750] Call Trace: [ 2111.701167] dump_stack+0x107/0x167 [ 2111.701728] should_fail.cold+0x5/0xa [ 2111.702316] __alloc_pages_nodemask+0x182/0x600 [ 2111.703028] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2111.703955] ? find_get_entry+0x2c8/0x740 [ 2111.704586] ? mark_held_locks+0x9e/0xe0 [ 2111.705209] ? __jbd2_journal_unfile_buffer+0xb0/0xb0 [ 2111.706000] alloc_pages_current+0x187/0x280 [ 2111.706672] __page_cache_alloc+0x2d2/0x360 [ 2111.707352] pagecache_get_page+0x2c7/0xc80 [ 2111.708022] grab_cache_page_write_begin+0x64/0xa0 [ 2111.708768] ext4_move_extents+0x1203/0x3050 [ 2111.709467] ? find_held_lock+0x2c/0x110 [ 2111.710101] ? lock_acquire+0x197/0x470 [ 2111.710716] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2111.711536] ? lock_release+0x680/0x680 [ 2111.712180] ? __fget_files+0x296/0x4c0 [ 2111.712809] __ext4_ioctl+0x302e/0x4190 [ 2111.713588] ? ext4_reset_inode_seed+0x450/0x450 00:49:28 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}]}) [ 2111.714315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.715260] ? find_held_lock+0x2c/0x110 00:49:28 executing program 0: ftruncate(0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe1, 0x4, 0x1f, 0x1, 0x0, 0x7, 0x2000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb8, 0x3, @perf_bp={&(0x7f0000000000), 0x2}, 0x208, 0x4, 0x7, 0xb, 0xffff, 0x1, 0x2, 0x0, 0x8fe4, 0x0, 0x8}, 0x0, 0xa, r0, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) [ 2111.715960] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2111.716875] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2111.717654] ? do_vfs_ioctl+0x283/0x10d0 [ 2111.718277] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2111.719084] ? generic_block_fiemap+0x60/0x60 [ 2111.719780] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.720535] ? selinux_file_ioctl+0xb6/0x270 [ 2111.721219] ? __ext4_ioctl+0x4190/0x4190 [ 2111.721859] __x64_sys_ioctl+0x19a/0x210 [ 2111.722484] do_syscall_64+0x33/0x40 [ 2111.723067] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2111.724056] RIP: 0033:0x7ff84abb9b19 [ 2111.724632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.728118] RSP: 002b:00007ff84812f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.729388] RAX: ffffffffffffffda RBX: 00007ff84acccf60 RCX: 00007ff84abb9b19 [ 2111.730468] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2111.731554] RBP: 00007ff84812f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.732636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.733713] R13: 00007ffc8489ce0f R14: 00007ff84812f300 R15: 0000000000022000 [ 2111.866636] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 2111.866636] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2111.866636] [ 2111.870028] ------------[ cut here ]------------ [ 2111.870814] WARNING: CPU: 0 PID: 12042 at kernel/locking/lockdep.c:894 look_up_lock_class+0x86/0x110 [ 2111.870980] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2111.872177] Modules linked in: [ 2111.872205] CPU: 0 PID: 12042 Comm: syz-executor.3 Not tainted 5.10.215 #1 [ 2111.872215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.872233] RIP: 0010:look_up_lock_class+0x86/0x110 [ 2111.872257] Code: 24 e8 ce 02 00 00 4d 85 e4 74 2c 49 39 5c 24 40 75 eb 48 8b 45 18 49 39 84 24 b0 00 00 00 74 1a 48 81 7d 00 00 e2 14 86 74 10 <0f> 0b eb 0c e8 a1 7c 0a fe 85 c0 75 50 45 31 e4 48 83 c4 08 4c 89 [ 2111.873008] EXT4-fs (loop1): group descriptors corrupted! [ 2111.873583] RSP: 0018:ffff88805124f590 EFLAGS: 00010002 [ 2111.882304] RAX: ffffffff84535420 RBX: ffffffff871b5521 RCX: 0000000000000000 [ 2111.883705] RDX: 0000000000000046 RSI: 0000000000000001 RDI: ffff88801a5f7898 [ 2111.885082] RBP: ffff88801a5f7898 R08: 0000000000000001 R09: 0000000000000000 [ 2111.886472] R10: 0000000000000246 R11: 0000000000000001 R12: ffffffff868ad340 [ 2111.891320] R13: ffffffff86bf19e0 R14: 0000000000000001 R15: 0000000000000000 [ 2111.892724] FS: 00007fcf0ed64700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2111.894292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2111.895437] CR2: 0000001b2d028000 CR3: 00000000496d2000 CR4: 0000000000350ef0 [ 2111.896829] DR0: 0000000020000080 DR1: 0000000000000000 DR2: 0000000000000000 [ 2111.898202] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2111.899586] Call Trace: [ 2111.900107] ? __warn+0xe2/0x1f0 [ 2111.900765] ? look_up_lock_class+0x86/0x110 [ 2111.901625] ? report_bug+0x1c1/0x210 [ 2111.902364] ? handle_bug+0x41/0x90 [ 2111.903060] ? exc_invalid_op+0x14/0x50 [ 2111.903842] ? asm_exc_invalid_op+0x12/0x20 [ 2111.904675] ? look_up_lock_class+0x86/0x110 [ 2111.905537] ? register_lock_class+0xbb/0x17b0 [ 2111.906431] register_lock_class+0xbb/0x17b0 [ 2111.907279] ? is_dynamic_key+0x1e0/0x1e0 [ 2111.908059] ? is_dynamic_key+0x1e0/0x1e0 [ 2111.908859] ? lock_chain_count+0x20/0x20 [ 2111.909655] ? mark_lock+0xf5/0x2df0 [ 2111.910360] __lock_acquire+0x102/0x5b00 [ 2111.911130] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.912104] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.913003] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.913902] lock_acquire+0x197/0x470 [ 2111.914554] ? ext4_move_extents+0x90d/0x3050 [ 2111.915339] ? lock_release+0x680/0x680 [ 2111.916017] ? mark_lock+0xf5/0x2df0 [ 2111.916592] ? __is_insn_slot_addr+0x123/0x290 [ 2111.917257] ? lock_chain_count+0x20/0x20 [ 2111.917862] down_write_nested+0x96/0x160 [ 2111.918463] ? ext4_move_extents+0x90d/0x3050 [ 2111.919110] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2111.919857] ext4_move_extents+0x90d/0x3050 [ 2111.920486] ? __lock_acquire+0x1657/0x5b00 [ 2111.921117] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.921878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.922632] ? lock_acquire+0x197/0x470 [ 2111.923217] ? find_held_lock+0x2c/0x110 [ 2111.923815] ? lock_acquire+0x197/0x470 [ 2111.924390] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2111.925146] ? lock_release+0x680/0x680 [ 2111.925726] ? __fget_files+0x296/0x4c0 [ 2111.926307] __ext4_ioctl+0x302e/0x4190 [ 2111.926888] ? ext4_reset_inode_seed+0x450/0x450 [ 2111.927589] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2111.928342] ? find_held_lock+0x2c/0x110 [ 2111.928936] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2111.929774] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2111.930525] ? do_vfs_ioctl+0x283/0x10d0 [ 2111.931114] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2111.931896] ? generic_block_fiemap+0x60/0x60 [ 2111.932558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2111.933257] ? selinux_file_ioctl+0xb6/0x270 [ 2111.933902] ? __ext4_ioctl+0x4190/0x4190 [ 2111.934507] __x64_sys_ioctl+0x19a/0x210 [ 2111.935098] do_syscall_64+0x33/0x40 [ 2111.935649] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2111.936397] RIP: 0033:0x7fcf117eeb19 [ 2111.936936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.939598] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.940699] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2111.941733] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2111.942771] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.943805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2111.944837] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 [ 2111.945872] irq event stamp: 1851 [ 2111.946379] hardirqs last enabled at (1851): [] syscall_enter_from_user_mode+0x1d/0x50 [ 2111.947759] hardirqs last disabled at (1850): [] do_syscall_64+0xf/0x40 [ 2111.948937] softirqs last enabled at (1832): [] asm_call_irq_on_stack+0x12/0x20 [ 2111.950221] softirqs last disabled at (1799): [] asm_call_irq_on_stack+0x12/0x20 [ 2111.951501] ---[ end trace a10293d51a3833ce ]--- [ 2111.960421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.960937] print_req_error: 22 callbacks suppressed [ 2111.960948] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.962354] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.963251] buffer_io_error: 6 callbacks suppressed [ 2111.963257] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2111.978657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.979141] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.980130] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.981018] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2111.981918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.982368] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.983444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.983931] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.984985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.985433] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.986486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.986978] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.988588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.989065] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.992490] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2111.993385] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2111.994048] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2111.994684] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2111.995340] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2111.996073] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2111.997349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2111.997923] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2112.052098] FAULT_INJECTION: forcing a failure. [ 2112.052098] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.053156] CPU: 1 PID: 12042 Comm: syz-executor.3 Tainted: G W 5.10.215 #1 [ 2112.053845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2112.054529] Call Trace: [ 2112.054757] dump_stack+0x107/0x167 [ 2112.055065] should_fail.cold+0x5/0xa [ 2112.055395] ? ext4_find_extent+0xa3d/0xd30 [ 2112.055761] should_failslab+0x5/0x20 [ 2112.056081] __kmalloc+0x72/0x390 [ 2112.056378] ext4_find_extent+0xa3d/0xd30 [ 2112.056730] ? kfree+0xd7/0x340 [ 2112.057012] ext4_swap_extents+0x321/0x14c0 [ 2112.057376] ? ext4_dirblock_csum_verify+0x2b8/0x4b0 [ 2112.057811] ? ext4_get_es_cache+0x600/0x600 [ 2112.058189] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2112.058621] ext4_move_extents+0x2566/0x3050 [ 2112.059010] ? find_held_lock+0x2c/0x110 [ 2112.059366] ? lock_acquire+0x197/0x470 [ 2112.059701] ? ext4_double_up_write_data_sem+0x30/0x30 [ 2112.060143] ? lock_release+0x680/0x680 [ 2112.060480] ? __fget_files+0x296/0x4c0 [ 2112.060829] __ext4_ioctl+0x302e/0x4190 [ 2112.061174] ? ext4_reset_inode_seed+0x450/0x450 [ 2112.061572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2112.062015] ? find_held_lock+0x2c/0x110 [ 2112.062366] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2112.062848] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2112.063285] ? do_vfs_ioctl+0x283/0x10d0 [ 2112.063626] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2112.064063] ? generic_block_fiemap+0x60/0x60 [ 2112.064440] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2112.064849] ? selinux_file_ioctl+0xb6/0x270 [ 2112.065223] ? __ext4_ioctl+0x4190/0x4190 [ 2112.065568] __x64_sys_ioctl+0x19a/0x210 [ 2112.065909] do_syscall_64+0x33/0x40 [ 2112.066220] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2112.066644] RIP: 0033:0x7fcf117eeb19 [ 2112.066955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2112.068468] RSP: 002b:00007fcf0ed64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2112.069101] RAX: ffffffffffffffda RBX: 00007fcf11901f60 RCX: 00007fcf117eeb19 [ 2112.069692] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000003 [ 2112.070287] RBP: 00007fcf0ed641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2112.070875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2112.071471] R13: 00007ffd7fce0d4f R14: 00007fcf0ed64300 R15: 0000000000022000 VM DIAGNOSIS: 00:49:28 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d2351 RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff88805124efa8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000066 R13=0000000000000066 R14=ffffffff879eb240 R15=dffffc0000000000 RIP=ffffffff822d23a8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcf0ed64700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d028000 CR3=00000000496d2000 CR4=00350ef0 DR0=0000000020000080 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e6ae20 RBX=0000000000000001 RCX=ffffffff83e52c1c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e6b428 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85673e08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e6ae2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb1cfc86000 CR3=00000000413c8000 CR4=00350ee0 DR0=0000000020000080 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000