, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) [ 570.423384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.252817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:11:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, 0x0, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x10000, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:11:37 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x20, 0xff, 0x5be}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0xc7, [0x4, 0x2, 0x4, 0x3, 0x7fff, 0xff], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000100)=""/199}, &(0x7f00000003c0)=0x78) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) 21:11:37 executing program 4: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc5246497e6e9be2a52b04fa488404cab1100cb1570e429dd5057d7d5db566fc9e481b1128bce328ef44be28c02ea82a613a077c2508b07638c2da855795a8523c7986a4979fc9300627bae481812a27b8f03511a4dfbfc96803b89f8efb3de820ef8e9bd306955000037976789cf995521a65b9192b2dde0498242f304269068"], &(0x7f0000000340)=""/106, 0x6a) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) recvmmsg(r1, 0x0, 0x0, 0x16060, 0x0) fcntl$notify(r0, 0x402, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x200ffd, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000001010300010000000000000000000000eca7d041990aebb7"], 0x1c}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r3, &(0x7f0000000000), 0x5ac, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x5) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x401}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff) 21:11:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:11:37 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:11:37 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:11:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) [ 586.206033] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:11:37 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) [ 586.367363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:11:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, 0x0, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x10000, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 586.467876] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:11:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 586.678884] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:11:37 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4002, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) signalfd4(r1, &(0x7f0000000180)={[0x2]}, 0x8, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414bb, {0x2, 0x0, @broadcast}}) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast1}, {0x306, @remote}, 0x10, {0x2, 0x4e23, @local}, 'erspan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x0, 0x0, [0xee56, 0x10000, 0x8, 0x1, 0x8001, 0xffffffffffffff6b], 0x2, &(0x7f0000000140)=[{}], 0x0, [{}, {}]}, 0x98) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xd, 0x12, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="596f587b6c263c87417fb016d2ab60f3d50ba31b3e746a3499b2605d1400100000ab48808680881343a632d0e162daee8f80816cb176d5ba7b7639c2b8c0f30086e97d"]) 21:11:37 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:11:37 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000000)='./mnt\x00', 0x0) utimes(&(0x7f0000000300)='mnt/encrypted_dir\x00', &(0x7f0000000400)={{0x0, 0x2710}, {0x77359400}}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00e8ffff2d2f66696c653100"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4}, 'mnt/encrypted_dir\x00'}) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:11:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:11:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 586.949321] audit: type=1326 audit(1723410698.172:230): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 586.953502] audit: type=1326 audit(1723410698.172:231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 586.960547] audit: type=1326 audit(1723410698.173:232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 586.971460] audit: type=1326 audit(1723410698.173:233): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 586.983554] audit: type=1326 audit(1723410698.174:234): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 586.994947] audit: type=1326 audit(1723410698.175:235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 587.004879] EXT4-fs (loop7): Unrecognized mount option "YoX{l&<‡A°Ò«`óÕ £>tj4™²`]" or missing value [ 587.005560] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 587.009671] audit: type=1326 audit(1723410698.175:236): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 [ 587.022103] audit: type=1326 audit(1723410698.175:237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c5873a04 code=0x7ffc0000 [ 587.026978] audit: type=1326 audit(1723410698.178:238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9c5873a04 code=0x7ffc0000 [ 587.032084] audit: type=1326 audit(1723410698.179:239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6690 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c58c0b19 code=0x7ffc0000 21:11:38 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:11:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:11:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 587.220287] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:11:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), 0x0, {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 587.398801] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:11:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:11:53 executing program 4: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) timer_create(0xbc06432f2784fc9b, &(0x7f0000000100)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x1, 0x0, &(0x7f0000000340)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x8000000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r4, 0x10000000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x364a0d4851b6297e, 0x4010, 0xffffffffffffffff, 0x8000000) r7 = inotify_init1(0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0x401, {}, 0xa98b, 0x6, 0x0, {0x0, 0x0, r4}}, 0xffff) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r8, 0x1, 0x0, 0x2, 0x0, 0x0, {0x0, r9}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x2f, 0x4}, &(0x7f0000000280)=0x0) timer_settime(r10, 0x0, &(0x7f00000000c0)={{0x77359400}, {r0, r1+10000000}}, 0x0) prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:11:53 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:11:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:11:53 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000000)='./mnt\x00', 0x0) utimes(&(0x7f0000000300)='mnt/encrypted_dir\x00', &(0x7f0000000400)={{0x0, 0x2710}, {0x77359400}}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00e8ffff2d2f66696c653100"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4}, 'mnt/encrypted_dir\x00'}) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:11:53 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), 0x0, {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:11:53 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:11:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x5, 0xfffffffffffffd2d, 0x0, 0x91, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(r0, 0x0, 0x2) umount2(&(0x7f0000000080)='./file0\x00', 0x4) lseek(r0, 0xfa2b, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYRESDEC=r0]) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') creat(&(0x7f0000000300)='./file0\x00', 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @adiantum, 0x3, @desc2}) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) [ 602.760198] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 602.881892] tmpfs: Unknown parameter '00000000000000000000005ÿÿÿÿ00000000000000000003' [ 602.944623] tmpfs: Unknown parameter '00000000000000000000004ÿÿÿÿ00000000000000000003' 21:12:10 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), 0x0, {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:12:10 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') openat(r5, &(0x7f0000000380)='./file1\x00', 0x101002, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=r2, @ANYBLOB='2000,fowner=\x00'/23, @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,defcontext=unconfined_u,smackfshat=\',\'A,seclabel,pcr=00000000000000000051,defcontext=user_u,appraise,\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c000000000058794d6da159fabe220e560a51c5e38765c88a97700a6182f5c0221e12d5dc45bffc504581835098a8cbcb3c0418b20be986999885ad50ca0b2fbafee5390f5bb495c5b9bb014d3ee6c2cdbdace969f3c2fd6a93554dbd2cd13aa2"], 0x1c}}, 0x0) 21:12:10 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a5480900000000000000dac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r1 = getegid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5805}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setresgid(r1, r1, r1) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) sendmsg$inet6(r2, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)={0x3, 0x0, @auto=[0x26]}, 0x9, r0) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\xf7{]&\x00', 0x0) unshare(0x48020200) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0xee00) fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, 0xffffffffffffffff, r4) setgroups(0x4, &(0x7f0000000400)=[r1, r1, r1, r4]) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x1a, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) 21:12:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x14050884) 21:12:10 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:12:10 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 619.247356] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 619.286005] 9pnet: Insufficient options for proto=fd 21:12:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 619.391283] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 619.395356] 9pnet: Insufficient options for proto=fd 21:12:10 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') openat(r5, &(0x7f0000000380)='./file1\x00', 0x101002, 0x0) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=r2, @ANYBLOB='2000,fowner=\x00'/23, @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,defcontext=unconfined_u,smackfshat=\',\'A,seclabel,pcr=00000000000000000051,defcontext=user_u,appraise,\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c000000000058794d6da159fabe220e560a51c5e38765c88a97700a6182f5c0221e12d5dc45bffc504581835098a8cbcb3c0418b20be986999885ad50ca0b2fbafee5390f5bb495c5b9bb014d3ee6c2cdbdace969f3c2fd6a93554dbd2cd13aa2"], 0x1c}}, 0x0) 21:12:10 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 619.545463] 9pnet: Insufficient options for proto=fd 21:12:10 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) [ 619.586878] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:10 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x14050884) 21:12:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 619.868676] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:12:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='mnt/encrypted_dir\x00', 0x6, 0x9, &(0x7f0000000640)=[{&(0x7f0000001100)="230bd820d6374618769ea657211e45e018a5fd36664b927cb340ed42d94521ba411aaa8daefa790137dc0c8f0576bec33b932f9a0fb84cae2f7f431262ea5e40e26fd863830cc6f72cc2b2a691d926de6500862a2fe4118dc3ce6a06fdbf1e5a68e864e1c1e3bfbb7c3c23efc97e8cdbfc0e1ab01d68ddf915b071c23d6512e337eb1f49ebbcd8d05d1bfea37268772e2baaaf12214386ebf6476f14a8eb9d579f52e9782e6e68b04ee08a0650323d40944f3f9633d528e446697ddf29f8b7151461e4afd811dd89b2a5a1ee4f17d38322b5edda5575726f2d07215f77311822e3769777e59b8aa0fb8687fd63e88b494582a7ab60844274f0bef8fab80e7c52692642591e4229bcfbbddd2c090de10f23f939b52741bdec4164e210e6068df8ce3fde58f1d7eb734564b8e96bd763c6730e4956ec91ec81c42751367b6ea2ec3929120e46ba64bed1e07309a15f8a762566925fee83f0556333159a9b0a648c0f7972c2ef7872614440de87ff5c59f783a10f8382102154d08986028c0923f0f39c17286b99579e616c25275e38cb703a2b36956c1998f037c20c9ce368fa66a04f179d981c24a7567261d3e5468b5071727f9deb8c7c174163d08fc3adcccd5989d5e6e0a931fb70c9bfc6a9e07d18475af85b07c0ccbf5efc534894e03c12905447f2fba0fae260d9242fa56a0f80dd3248e9191e024a3d048b8ed4a2a19aeff51a271675034eaf078e9df4461f683fc4dfe24e8f86ae3077d9be509d9fd75b5b83892e83e3e99800c6a0c6cb2910b757c7fdd950959a72f8025f942426707d65000a61206bfa801ffb2528847d743269fe6f47a0b4d341b4bddb5d9d02ad82fd876896359b66f40a8b36b8e1ea7c320db0d80e81f425a23283b7cc20169b112d2ebe7efb115930dd198c784bcd5f84223727e0b847861da57f8812bc79ade0138ebaa13311c5b3ea689d7509476067277a4781a9a9e775c1795e9303a0f438d6534080aa47f9536552990e4f89c9db733af34fbda347abe28cfc2bbbc3b40467a3e317df902adb5ca0c6b00b0e68bd3f676936828bf12acfeecd1a43c2aed2c7aa775781cf512bc80bdcc112e235e92e8b4efc3e594ab82ce6b895ab5c33c92474b8f32c183954d26628d62421c18d4836d9fea1f211f0ba603dd1deee0c864eceac9964f09020f9f56547206e6cf32411618fa3955bb87819b433a5d6e79a75c21cb2715db0911ee1c6e83ead26a7bbb3afaa5321ddcbd71b713d45dab9bb1065a2b0f9f53a8a5a1bee8e2fe78aa95a841b4f6a7dd581821395fa1b38078997317de14577196691af21e89c339e1472727d3d918874f9c88403a8d99557d9dae96abff40bee28534878bbecfa23954859d650a1ff1882da67dfa3323f7c66f29ca68da65b05b4d109ea35f62cfee03afc10fcb0d0c8ece7f8832fab72afb8d5ddff855a29e2648ba3d313a693342052649603d39810b4fb57ce8a8edf3bbfbf156cf82e39ca1377f38f9812c3a48ec27f7b78c0eb7736a71afb091236b215d53b3279f98453eb15e905a8e05fcb3fce38e7cb9bae2e95ac87ca08e8bb5d620e4c27d692f2446347160efb530d16ab7a5711ab381f8d276add3264881609812b45e2328e3db9de9177e13d67559111830e3ff2459367328cb9b013b59f64f0aa65e53cbb64fdf47da73c19788f6b708707781e9618b8ce246c0cbeeb4ab59c9bda08b2d9f87d7f84ff3ce59356c7648ab3f8ecb419ae21ab0a1499d2870c50c406d7d161fb30f59c67e02b7191c49f9e197c5fd52d79aa335a1ca6aea30c116ff59e430d7683b354856e8c760cdad6321c5fa92e429fa3ddea37d7b39bcb0a7492e4414accec750795661e1358bbaff9b365299b76e5aca0741e4b5cc7c80b32a5975b09eac7d4d66dcb07187bf4f27d3e72b404eaae23dae203486b8f3293ea458f689aecd9f6a18949ddea1da48cee5c486630ddab7149ffabb95886d73a1f324b3dc47273608d93b3568649a352b804448425a02d733ecf48c02b74dce0df2fa7a3e3d6b46028f101d181219389010bf489d1161d760e31dae1ef5f2ae033a3b9e97b46a9d7afeb554b6c11f271504a855cd3b6c3549af63d82bf4c12d8ca2c63f2e1eea3083d9a9944805d3167d5e056414f367cb2083261fc63781a5bd01bfbc2d6ee940b5a5442b9d94db77e84ec3230cc826f4c37582d4822cde6b4c09ddc53b51d6bf2ec55a623d2d73114634ae28641624fc7dde738985e8fbead4b9f400b85a02ab7b68aa914775ba7020842a2472bd2d6aecd5a9c7779c733c9cf7dc3ccdee74e3ac7aef6aadb9fb084f780486301aaa1d54e7013d8bc26dd64a25a54779ffbf02264d998bd7dfc1599ba9aaa0b293ba81a7b899cc68d385f788eea7d3d09798c425c4377291ff6b4ab18c7fa4352116c61e8f3f9e98cdf83a1d528e1877c157a648d1c2d2def060ba438444ff209086e14b5e24fdd6276931db7337d14998c9555cb7c33a4d8505e95e60a1ea88648212fc2edae4ee3e54ddbccbb1c11a64d2bf959454bda8ccee8a262493a92db8fbcb87767132d038fe953598d9e0c284901f44c743dc19fea327067b889906c643e16fd01ee79abdf28f61a3b1c44827157ec2ebe12aa29222e5cc7c8fe1539ff4b5d11d33157b8846d17f7a686b0bdaf852b333be61283539e66e62f26f20f7d8b2c25fe85aa45a7aa2416dcc29330ee20a86ab58e263077d6d6170783f0ed85a790978225f4854508473f51f5b3f5f0107e874690b442812bdcb6009f8228b89d6625608ce3b851899ef1a830952f2c080dea32d0e407316c72fd1e8e11642787c36438d685b4c7402ad6838213647c69fca76838d62705c84b21fbb8a3b5c700d324133d5e19b4313dc58ead027f3aa94a21c3bf3070766e4ee6c144ee28c4c3392b34273b39b6af1c451c33b5d984676ca4cdb2803ff6013a9ddfe971c3ec9d9cea89f6fd0eb1c3fc9dcaaa6a7f106d7bb197456fd6dc46fdd6707c6b7afe24601e8fbb7622447eff78c38ad503cd0aa5b2548c0aa47002f1032ad653322dfcbc83618409e06a075e03c382dc0f7a707781cb22588177bb0e6ef96303f580b5fe8fa34decb6ee25217657130991173d5e1b40979d502d48118ae1992185cc9eddd824be097c754bfa597acc7e6977f264141b0b678268d5811e390c3140d001577dfe0a8d0be4950ecc52952e0c554aeb9dfcf65482c960fbc5818fab4f0c97e485442fc60e867e56369f39c11c410a5d169c3d5c55cd5f4905c0d1ff13eb9c923d1bad4c10f4184377c849c104a228515659611741455be860940e3cbe47991c4ef4ab14f6d213b86d1bf383fe584168191e2dce4e6c46a906bc7330b3a1402f6960e5295423b813b8f38123b8a5f87da66a6a47450be6e148b2556565c086820cc582909a8ec35c7ea237ff9c34224830c12223f312da6e178c54ef404e916e787045cd38aa6dd6498b3ee5744d6de3bca24d770ee54aede9756c4c09dc754e314c985021bd4440b8109157d10af7d219bf36425d1adc3229806cdcfbf4a318629ac6510f2d8dec5de1cd3c2060796c0c0b253a04e1bbac15504383b4b4e6e16dc2f17b998b11a04dbb35849c5f8b1e2a15f9714739623556d6216279b9a72fbda27ff5aedf6b50f13555012c1cf987c40dffb47d7c66156205d9ade88b668d892dde16de826f316ce3a872b92744418587cad21abe1d35b426bea84afe2b667c567c47837fa90c38b4bef26b5deb61f3299056a0c3719ed5fde1aae77cdf24b1cda5a3fef4272cfd7c672feacc2d2a4fbf45c1869bc9613b6813faeb3ad00dd127bf30d5b60f7839c2f7d3ffadca4205bde01baa7ea74446c6f6b8e498ae8b73781870bb8de4c3b0744a701a148227a2be573dc024af486a8f63c485cdc77a349dc916ac6579dff5ac5d7c566c6c25e485f347c8cb3bfce6c0e4c2bdd55e090f59f7db282a0331032959d49bf1130121055f42a8e29c9b81e6dcba513b3d6443e91f75e69334bcaf23548bd96c1ebc4bc80a025e84608a8afd6795d12d737685cf9a0b99128b3268f834e603327603897f8161df3e7e34b2fb8ff77e500bca85b44dd958991554d4eee7dbe9545b4202b9b3d114e3c9afcc09b4d2de08ef297da075a04ab807e8671ebee64c10cd367d13e4e7e859dc88c10bb8257783e97b1efad43c939a54377d2eeb12532da3e92bfff50d9c1b601634acf3ab753fdd34a3ebe6343e62926038c8e9af5edc1654f5ddbf5d7ba26e2d7506d9b031a0978fed254ff2cc84802eeaa28e00f8a715f73c56c1bc2987d4906c499b9dcae7dae59529522bf136a1848724a659102ab91bab5dd106c17317eda6707563b11140454eba5581ffed2254ac133eadc5480d5624792b7d90c3c55e3c1b0050807d848056111a1a2fec70be6b573a87f64b997f82aa099fed54bfa082ab7be99be914e4c67bfb1becf0dfcbf0e8802b570a6f36e07e259512bace6c2af6506095918419e582af61b18034bae4210be0eed78fb4377c55f21db1ce69ee41cca771b39d56635c29c26a588b496b697e714cbbc46f02e8cceffbb1cf085d3cd735117f932040a746788d462899caf39e5f0861a1d05d334187f7b001675e1a72d02b3e01c8229b81be52a2ce6ca9dd35c37d5ecae64e33e6d58d95e6bb96fe9c7a3bc8b4e61efb87967338ff0d52641c9b4b942adfa37544fdaa997ae84a7edd8af2beb62c93c3cd8c93a536c861f1e190783439e303a6f716a5af358de410d7c37a8dc341f4ed90d8e209a3ba0a9a9756bceca268064959e2e56ae8577f501af85c5554a9d97a8632c9f185c3cadc8017daaeeb35e926bda3fd898c60b1cca2d166946eb21ffff40c2847777e907f812acdb34dd0e2f0840ee5120abeb84bb7dd0e614e1583d288ee05a8e336612327cfdae7b726d6e4be0901e88d3e44fb61fdc158854a234fc125881105a4f74417c18a6dc296daf3795b5c56f5f4a37fc57d67f88a1e71d2d48c3ffe9968861d00bfe1f9747fdc06826a182f2b8f786202ac4766dae9e123707a70e2cc63ea8210f0a7dfb2dfe5140923b2d44e34b9460f92da28c8cdcb8aaa83603cfab3b1342d3c670812ac0a5321482f02d3abce3ba113300fc326085298c39a25de1f2f7211cf6b9085ff98b5aab95fb7990f04a537623e96d2389258754b1887ef707c25a92a221671ff06aa8047a5e1de2c34404032281af33af03fa7bd9020de3874f07a681a74eb922b4b7d84cfeea6b49a90cf01a75134a4e2fc0ab3fa56d07616f3d3ad28a7e1d0bf8d717543c44966e2dd0cc3b9eecb7da2d100abfae0b37d26c426b907308e65c849e5d4e0577d309a47a5ac520f87a71989542bdb9011da16ae5fb354f7adc19bc7c5f23d0d6888aa52c471737e4fd7dc05c9ecc3a37897f9f6d44f680bd5dcd1ae126b2b3fea299fc1b7226f3bfff2872c8d966ada6d192758a517f37cf925010d11a23361a458cd2405597a68d135478c1173ebfe6e7d8804fe1e72fbf6125aee28265981e0741dcced4c981f76a4fb1f4b1ef25fc4ec73214183f7687675aed6561fe4937039ee59af9be9d84304c3d33714eddba9401d16d0b86661fef7e0e7554c6dc6adc2484bb3f5f5ddb6df7fbc23608d72a9b04e32e78cee4aba3aed3cdff01ee3ad50c631eb30037c50bb4a45bf3b66c988134363f4e771a524b5a35f75fd348641654ac9968d4d75e3ad65bc550e1c57d50eaf1c727260a0df69989d98393de64fc926cd8b6d15a20c309323b5ca9a2143", 0x1000, 0x9}, {&(0x7f00000001c0)="a526bc9a0ecbd550e1bc925af395a8ee55f92c93d49a7c31e4e16eb783428f31d2d9e50187e9ec60ce10", 0x2a, 0xe23}, {&(0x7f0000000200)="9950a0cdca2a75cde3e652efe8ad3ccaf62aa3178ee6df8bb146854ce4d735ca68980825e5caf72ebc952c4aff5cb80443fef240947e3383b31bacbf3641ff5859b65bdf46216e1c9616a4fc844d58e41c6616c087787bbf2900c72a88064a78abf0724be5dd355a1a1e857bdd4f942a7683172782ad5686942522c0824c936287f8780d5329766f5b0d46747c5765cb8d641c45f5bc5383951d0265df14f44a1d061e13bfb555c532b00238080ef8e34025fcc20b6f9f7f1e1ac49544c266a351928f0e5c65bdf97bb315f772cbbd0599f98fe38826", 0xd6, 0x59e}, {&(0x7f0000000300)="4609ac88ce0881b913fac636541e421168b4f2fa617e291364d55116d9eb633a2c627afd3ae4bef8a02a04bd3f3632bdc8d75d0955747c3a3e5664a2c7c4b305b7bacd1bae87dcb3db1a515b28b686483694d8f24f858caf502cd12b3d8788469baed86059bcd7d89aa698a5e5384f10fb8d18003714457375107f7531ccd96a580865843e107c7add9bfbbd3de3f5729e047152c003a922a6b23efc1fd96fe04868e3db14f6ce97098b8e99353123e9816c8ce8474283260b45e68978", 0xbd, 0x13a}, {&(0x7f00000003c0)="243cfc7f005cc0fc4a978acccbd5080108bb288db91788cb1c43ce98a57359a1860b0c657ecf32fe45946f763d5e2297a82a7e3066b2bd117d4000c217f7cc899ca10680b2d94ba76dba7a90eded19d117466170a9e3b9db981f840bc709119a9c86c47631807189fb736948c9c761b24966b6cc10eed25ae88862f9a1d302469ed9978009c8845fc2d18c0aafd840e2d0498308a754554a5ae3b3c6bcd4bd3c0ff1e05ea40522880f30880ea770f2a9ace5ab233411de0ee8619c5ae32aade12959c80067236d96d094fb20f36b1e9c2ec0", 0xd2, 0xc894}, {&(0x7f0000000500)="1db73166b8d2fd3e59d7ddb2de3aa9775a477981b3b54bc5db358a7da0dd4bd20ab55f193daf416bd7d1244804f53bc83e01d2fc2403260707a639a73a09d5b2a80b621b2741a36b08acb2429f5af51b53c9df36ac2ecd", 0x57, 0x2}, {&(0x7f0000000580)="7dc967d592f2b670f2acbd18", 0xc, 0xfffffffffffffff8}, {&(0x7f00000005c0)="501fbaa36b60c6ce95c474d98d4fa343df03c8499a78b8dc9d1cbe1c471637a890b8b74a5abaf4e615da8e0377a42f855a2dfd7bae3fdcacd8f4e1174682c77abbdb7967bc2851c141a5cb", 0x4b, 0x8001}, {&(0x7f0000002100)="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", 0x1000, 0x4}], 0x2880001, &(0x7f00000007c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0, @ANYBLOB="78458d321adb88e3d581391ee02c73697a653d302c6e725f696e6f6465733d373734362c687567653d6164766973652c6d61736b3d5e4d41595f415050454e442c736d61636b6673726f6f743d5b2c2b2c00"]) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000000)='mnt/encrypted_dir/file0\x00') 21:12:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x14050884) 21:12:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, 0x0, 0x0, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:12:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:25 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:25 executing program 1: ftruncate(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x25, &(0x7f0000000080)={0x0, 0x7f52}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000002a40)) r2 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="000500ed234ec5002e2f66696c653100"]) fcntl$setstatus(r0, 0x4, 0x6400) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) write(r0, &(0x7f0000001200), 0xffffff45) [ 634.371109] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:25 executing program 4: set_mempolicy(0x8000, &(0x7f00000000c0), 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x16be, 0xef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) fork() 21:12:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, 0x0, 0x0, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 634.815839] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:12:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r8 = syz_genetlink_get_family_id$batadv(0x0, r6) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r8, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x14050884) 21:12:26 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, 0x0, 0x0, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 635.139164] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:26 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="eb3c081200049d800e2155dfa9bd50d72f495172c27d8949a06f685452c36fdec6327e3269c2111177dc34e25587479335eb99b1", 0x34, 0x4}, {0x0, 0x0, 0x1001000a03}], 0x0, &(0x7f0000000240)=ANY=[]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1f, 0x5, &(0x7f0000000400)=[{&(0x7f0000000180)="2de19254749107907c66bd459a9744d9c4f7fe5a2b48c03c08f32725573c6d412d00528c485cdbe129e447c434f97a63110b7eeb5513fe04d7694c4acc2ee7c9d5388d9b845566fae9e9126292969af8136bae908301fb12f1939e1d02993628be", 0x61, 0x44}, {&(0x7f0000000200)="e8b3e80a190bcf185960eccf255a7c868a08870409f8ba0259397f8c04f7bed963eb8a966a9b3c4f33c24ca5fe5840adb45d974b7a424901905466165cb5639a18c9bac610c1c94f1c817b32cf2697cd484bab4f8ed5133729548b47c973c0c9d7cd901191c83a0181f4355e0bf1159222bf451fa2ac3f2214cd7c2f077f9cf597b0dcd77fa49fe3c98bdfeeaae4d53e17fa1013a2fa0f", 0x97, 0xc3}, {&(0x7f00000002c0)="fb2be1711dcee495c0364166c71878e1f9e5dc0a9e6fcba0615b3f28f8315f771c92a4b2f6bda0eafeddca99ea536d5e5e0f6c0334abeb42136f7f", 0x3b, 0x1}, {&(0x7f0000001140)="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", 0x1000, 0x4eddec34}, {&(0x7f0000000300)="05bca6ef71729b7e764eefbeca699e46fba9700b6dffe8e60b33877328122ed94998807c1b6a5b4a3b3a7cc8a9226706251a03cfe0511c6a06045f0a8e62bd65e8090522bffb50a0206eb05d41daee8031654d46d09f2ab077dbc9c2fafeebac6499c4342970ffe7cf58aea700880855837cd7aadec309ec4da5ee23ec904d79fc8307003c3d64ddd68e90840851f26854a962280764e4616795442ea7db75fb417ce49b3e63270a61f1ea3ab8d3250072a619003976ecd503ae2880d34f836e1352b829a7", 0xc5, 0x8}], 0x92, &(0x7f0000000580)=ANY=[@ANYBLOB="64696f726561645f6e6f6c6f636b2c7573726a71756f74613d2c736d61636b6673666c6f6f723d28262a252e2b2c7569643cc242a243d83d791bdcf0cb446148ad7ec35b1923ef6bf3f5dd1b282f326a003b93690396638bb4b0315186db4881cefaf74c694370803f1568feefb564b00e8dce4d6e61787978b0fa3f125f80560d8e1f9bb97285edc5f2c357b97d879c86087df9e845680ebbd5761bde25890214828eacc1092557c049453c4efe56a2a992a5f545094ab584a312d36f201d", @ANYRESDEC=r1, @ANYBLOB=',\x00']) r2 = syz_open_dev$vcsa(&(0x7f0000000500), 0x8, 0x8c0240) mknodat(r2, &(0x7f0000000540)='./file0\x00', 0x400, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 21:12:26 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(r0, 0x0, 0x0, 0x60) r2 = syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x8001, 0xffffff85, 0x0, 0xc0880, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="010000000400006f9bf25712d1002e2f66696c653000"]) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xf7, &(0x7f0000000000)=0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @rand_addr=0x64010100}, {}, 0x0, {0x2, 0x0, @remote}}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=@known='user.incfs.id\x00', &(0x7f00000004c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) io_submit(r4, 0x3, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r6, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r6, &(0x7f00000003c0)="378eca52897d4644fb0050dfbf990e62a3fd6f20c6f597147f836678966c961242fa091b7a5bca7ddc121b0c658cd806316402c5e24cbc5b53d72ca3c6c141750cf8f85a622f488e62b2bfeac89e45a7c9b05a2b637aa50c34e14f7b31d277d87453a4631a7de184f12e7b53f80a3731d4d67389a1", 0x75, 0x100, 0x0, 0x3, r7}]) [ 635.211437] FAT-fs (loop1): invalid media value (0x49) [ 635.212123] FAT-fs (loop1): Can't find a valid FAT filesystem 21:12:26 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:26 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 635.282488] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:12:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) syz_genetlink_get_family_id$batadv(0x0, r6) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) 21:12:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:26 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101003, 0x0) pread64(r0, &(0x7f0000000280)=""/178, 0xb2, 0x9028) pread64(r0, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad0190710", 0x85, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x686beb89}}, './file0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000003c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000380)={0x83, 0xfffffe00, 0xfffffffc, 0x1, 0x10000, 0x6}) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x40c6e2, 0x20) r5 = socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f0000000540)=[{r3, 0x5201}, {r0, 0x2080}, {0xffffffffffffffff, 0x2000}, {r2, 0x4210}, {r5, 0xa509}, {r2}, {r2, 0x2}], 0x7, 0x8) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000180)) ftruncate(0xffffffffffffffff, 0x8001) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) dup2(r4, r1) [ 635.387166] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 635.497095] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 635.538177] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz-executor.1: bad orphan inode 301979167 [ 635.541030] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 21:12:41 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:12:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:12:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) syz_genetlink_get_family_id$batadv(0x0, r6) 21:12:41 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(r0, 0x0, 0x0, 0x60) r2 = syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x8001, 0xffffff85, 0x0, 0xc0880, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="010000000400006f9bf25712d1002e2f66696c653000"]) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xf7, &(0x7f0000000000)=0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @rand_addr=0x64010100}, {}, 0x0, {0x2, 0x0, @remote}}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=@known='user.incfs.id\x00', &(0x7f00000004c0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) io_submit(r4, 0x3, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r6, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x8, r6, &(0x7f00000003c0)="378eca52897d4644fb0050dfbf990e62a3fd6f20c6f597147f836678966c961242fa091b7a5bca7ddc121b0c658cd806316402c5e24cbc5b53d72ca3c6c141750cf8f85a622f488e62b2bfeac89e45a7c9b05a2b637aa50c34e14f7b31d277d87453a4631a7de184f12e7b53f80a3731d4d67389a1", 0x75, 0x100, 0x0, 0x3, r7}]) 21:12:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:12:41 executing program 1: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbee9, 0x69}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x31f0, 0xf}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x27}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 21:12:41 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r2, r3, 0x0, 0x7f) faccessat(r3, &(0x7f0000000740)='./file0/file1\x00', 0x301) sendfile(r0, r1, 0x0, 0x7f) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7}, 0x2002) [ 650.536335] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:41 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:56 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 665.699660] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:12:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r2, r3, 0x0, 0x7f) faccessat(r3, &(0x7f0000000740)='./file0/file1\x00', 0x301) sendfile(r0, r1, 0x0, 0x7f) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7}, 0x2002) 21:12:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, 0x0}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:12:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:12:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:12:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) 21:12:56 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:12:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x805}, 0x1) 21:12:56 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:13:12 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:13:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:13:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:13:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:13:12 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, 0x0}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r2, r3, 0x0, 0x7f) faccessat(r3, &(0x7f0000000740)='./file0/file1\x00', 0x301) sendfile(r0, r1, 0x0, 0x7f) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7}, 0x2002) 21:13:12 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r3, r4, 0x0, 0x7f) pread64(r4, &(0x7f00000001c0), 0x0, 0x1) dup2(r2, r1) [ 681.040102] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:12 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:13:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 681.220306] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:12 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, 0x0}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) syz_genetlink_get_family_id$batadv(0x0, r6) [ 681.350174] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:13:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r2, r3, 0x0, 0x7f) faccessat(r3, &(0x7f0000000740)='./file0/file1\x00', 0x301) sendfile(r0, r1, 0x0, 0x7f) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7}, 0x2002) 21:13:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) pread64(r2, &(0x7f00000001c0), 0x0, 0x1) 21:13:12 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:13:12 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 681.564745] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:13:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:13:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r2, r3, 0x0, 0x7f) faccessat(r3, &(0x7f0000000740)='./file0/file1\x00', 0x301) sendfile(r0, r1, 0x0, 0x7f) 21:13:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:13:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) syz_genetlink_get_family_id$batadv(0x0, r6) 21:13:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:13:35 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:13:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) [ 704.408079] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:13:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:13:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:13:35 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:13:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) r6 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) syz_genetlink_get_family_id$batadv(0x0, r6) 21:13:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:35 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) [ 704.647716] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:13:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:13:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:13:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) 21:13:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) [ 704.831787] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:13:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:13:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:13:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:13:50 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:13:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:13:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r4, r5, 0x0, 0x7f) pread64(r5, &(0x7f00000001c0), 0x0, 0x1) dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) 21:13:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 719.646853] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:13:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:14:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 735.384736] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:06 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r3, r4, 0x0, 0x7f) pread64(r4, &(0x7f00000001c0), 0x0, 0x1) dup2(r2, r1) 21:14:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:06 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:14:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:06 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 735.688125] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:14:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r3, r4, 0x0, 0x7f) pread64(r4, &(0x7f00000001c0), 0x0, 0x1) dup2(r2, r1) 21:14:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(0xffffffffffffffff, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:14:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:07 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:07 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 735.969915] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) pread64(r2, &(0x7f00000001c0), 0x0, 0x1) 21:14:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:14:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 750.996586] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:14:22 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(0xffffffffffffffff, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:14:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:22 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 751.200945] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:22 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 751.370813] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:14:22 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000780)=0x19) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(0xffffffffffffffff, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 751.512209] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:14:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:14:37 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:37 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:14:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:14:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) [ 766.061951] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 766.200634] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:37 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 766.322757] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:52 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:14:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:14:52 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:14:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:14:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:52 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x10000, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 781.093617] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:52 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x10000, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 781.313987] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:52 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, 0xffffffffffffffff, &(0x7f00000003c0)=0x10000, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 781.549099] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:14:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:14:52 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, 0x0, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 781.793693] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 782.086670] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:14:53 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:14:53 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, 0x0, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:14:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:14:53 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:14:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:14:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:14:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:15:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:15:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x0, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:15:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:15:08 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:15:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, 0x0, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:08 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:15:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) faccessat(r0, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:15:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) [ 797.202094] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0), 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:08 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 797.400112] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x0, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:15:08 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(0x0) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:15:08 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:15:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:15:08 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0), 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) [ 797.625153] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) faccessat(r0, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0), 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(0x0) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 813.907658] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x0, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:15:25 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:15:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:15:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:15:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:15:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(0x0) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 814.313930] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:15:25 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:15:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) faccessat(r0, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 814.492769] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 814.596634] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:15:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:15:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:15:25 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, 0x0, 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:41 executing program 2: r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 21:15:41 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:15:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x0, r0, &(0x7f00000001c0), 0x2, 0x0) 21:15:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:15:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:15:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:15:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, 0x0, 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:15:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:15:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, 0x0, 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:41 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x0, r0, &(0x7f00000001c0), 0x2, 0x0) 21:15:56 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:15:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:15:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:15:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) umount2(&(0x7f0000000700)='./file0/file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:15:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:15:56 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 21:15:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:56 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:57 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:57 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:15:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:15:57 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x0, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 845.994568] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 21:15:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:15:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:16:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x0, r0, &(0x7f00000001c0), 0x2, 0x0) 21:16:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:16:12 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 21:16:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:16:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, 0x0, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:16:12 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x0, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:16:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) [ 861.382726] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 21:16:12 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:12 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:12 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x0, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:16:12 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 861.693126] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 21:16:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:16:13 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:16:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 861.950122] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:16:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:16:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, 0x0, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:16:29 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:29 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:16:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x2, 0x0) 21:16:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:16:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:16:29 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 878.539621] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:16:29 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:29 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 878.843551] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:16:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:16:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x2, 0x0) 21:16:44 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, 0x0, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:16:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:16:45 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) 21:16:45 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:16:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 893.824589] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:16:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:45 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 894.149075] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:16:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:16:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x2, 0x0) 21:17:02 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:17:02 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, 0x0, 0x2, 0x0) 21:17:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) [ 911.178586] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:17:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:17:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:17:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 911.236014] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:17:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 911.401791] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:17:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, 0x0, 0x2, 0x0) 21:17:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:02 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(0x0, r1, 0xa, r0, 0x8) 21:17:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:02 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(0x0) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, 0x0, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:17:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, 0x0, 0x2, 0x0) [ 911.912236] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:17:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(0x0, r1, 0xa, r0, 0x8) 21:17:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(0x0, r1, 0xa, r0, 0x8) 21:17:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, 0x0, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:17:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x0, 0x0) 21:17:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 927.457128] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:17:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:18 executing program 1: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:17:18 executing program 1: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:19 executing program 1: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:19 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x0, 0x0) 21:17:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:17:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x0, 0x0) 21:17:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:34 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:17:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) [ 943.682023] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:17:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:17:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) pread64(r2, &(0x7f00000001c0), 0x0, 0x1) 21:17:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:17:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:17:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:17:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:17:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) pread64(r2, &(0x7f00000001c0), 0x0, 0x1) 21:17:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:17:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:07 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:18:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:18:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:18:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) pread64(r2, &(0x7f00000001c0), 0x0, 0x1) 21:18:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:18:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:18:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 976.056519] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 976.305923] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:18:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) (fail_nth: 1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 976.608954] FAULT_INJECTION: forcing a failure. [ 976.608954] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 976.611305] CPU: 1 PID: 14314 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 976.613091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.615350] Call Trace: [ 976.616015] dump_stack+0x107/0x167 [ 976.616920] FAULT_INJECTION: forcing a failure. [ 976.616920] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 976.616981] should_fail.cold+0x5/0xa [ 976.620519] _copy_from_user+0x2e/0x1b0 [ 976.621482] perf_copy_attr+0x11a/0x8a0 [ 976.622439] __do_sys_perf_event_open+0xb9/0x2e60 [ 976.623604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 976.624763] ? perf_event_set_output+0x5b0/0x5b0 [ 976.625883] ? wait_for_completion_io+0x270/0x270 [ 976.627049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.628351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.629602] do_syscall_64+0x33/0x40 [ 976.630493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 976.631672] RIP: 0033:0x7f235e5b8b19 [ 976.632564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.637010] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 976.638835] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 976.640571] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 976.642250] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.643945] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 976.645688] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 976.647532] CPU: 0 PID: 14317 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 976.648309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.649208] Call Trace: [ 976.649483] dump_stack+0x107/0x167 [ 976.649856] should_fail.cold+0x5/0xa [ 976.650302] __alloc_pages_nodemask+0x182/0x600 [ 976.650772] ? __lockdep_reset_lock+0x180/0x180 [ 976.651336] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 976.651954] ? tun_build_skb+0x181/0xfe0 [ 976.652454] alloc_pages_current+0x187/0x280 [ 976.652915] skb_page_frag_refill+0x27c/0x490 [ 976.653427] tun_build_skb+0x1fa/0xfe0 [ 976.653840] ? tun_xdp_act+0x6f0/0x6f0 [ 976.654290] ? __lock_acquire+0xbb1/0x5b00 [ 976.654735] tun_get_user+0x6c1/0x32f0 [ 976.655183] ? usage_accumulate+0xe0/0x110 [ 976.655643] ? tun_build_skb+0xfe0/0xfe0 [ 976.656059] ? __tun_detach+0x4e0/0x12b0 [ 976.657101] ? lock_downgrade+0x6d0/0x6d0 [ 976.658199] ? perf_trace_lock+0xac/0x490 [ 976.658651] ? SOFTIRQ_verbose+0x10/0x10 [ 976.659705] tun_chr_write_iter+0xe1/0x1e0 [ 976.660240] new_sync_write+0x42c/0x660 [ 976.660683] ? new_sync_read+0x6f0/0x6f0 [ 976.661791] ? avc_policy_seqno+0x9/0x70 [ 976.662882] ? selinux_file_permission+0x92/0x520 [ 976.663446] ? security_file_permission+0xb1/0xe0 [ 976.664710] vfs_write+0x7c0/0xb10 [ 976.665103] ksys_write+0x12d/0x260 [ 976.666052] ? __ia32_sys_read+0xb0/0xb0 [ 976.666535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.667883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.668483] do_syscall_64+0x33/0x40 [ 976.669481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 976.670023] RIP: 0033:0x7f73bc8555ff [ 976.670968] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 976.675619] RSP: 002b:00007f73b9e18150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 976.676477] RAX: ffffffffffffffda RBX: 00007f73bc9b5f60 RCX: 00007f73bc8555ff [ 976.677314] RDX: 0000000000000072 RSI: 0000000020000140 RDI: 00000000000000f0 [ 976.678068] RBP: 00007f73b9e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.678872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 976.679670] R13: 00007ffe5499766f R14: 00007f73b9e18300 R15: 0000000000022000 21:18:07 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 976.760967] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:18:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:18:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:18:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) (fail_nth: 2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 977.044064] FAULT_INJECTION: forcing a failure. [ 977.044064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.045584] CPU: 1 PID: 14418 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 977.046299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 977.047155] Call Trace: [ 977.047440] dump_stack+0x107/0x167 [ 977.047826] should_fail.cold+0x5/0xa [ 977.048234] copy_page_from_iter+0x40a/0x900 [ 977.048715] tun_build_skb+0x2d3/0xfe0 [ 977.049136] ? tun_xdp_act+0x6f0/0x6f0 [ 977.049543] ? __lock_acquire+0xbb1/0x5b00 [ 977.050001] tun_get_user+0x6c1/0x32f0 [ 977.050414] ? usage_accumulate+0xe0/0x110 [ 977.050874] ? tun_build_skb+0xfe0/0xfe0 [ 977.051310] ? __tun_detach+0x4e0/0x12b0 [ 977.052261] ? lock_downgrade+0x6d0/0x6d0 [ 977.052722] ? perf_trace_lock+0xac/0x490 [ 977.053725] ? SOFTIRQ_verbose+0x10/0x10 [ 977.054175] tun_chr_write_iter+0xe1/0x1e0 [ 977.055210] new_sync_write+0x42c/0x660 [ 977.055645] ? new_sync_read+0x6f0/0x6f0 [ 977.056654] ? avc_policy_seqno+0x9/0x70 [ 977.057097] ? selinux_file_permission+0x92/0x520 [ 977.058250] ? security_file_permission+0xb1/0xe0 [ 977.058782] vfs_write+0x7c0/0xb10 [ 977.059638] ksys_write+0x12d/0x260 [ 977.060037] ? __ia32_sys_read+0xb0/0xb0 [ 977.061034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 977.061599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 977.062852] do_syscall_64+0x33/0x40 [ 977.063268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 977.064532] RIP: 0033:0x7f73bc8555ff [ 977.064937] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 977.069436] RSP: 002b:00007f73b9e18150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 977.070239] RAX: ffffffffffffffda RBX: 00007f73bc9b5f60 RCX: 00007f73bc8555ff [ 977.070994] RDX: 0000000000000072 RSI: 0000000020000140 RDI: 00000000000000f0 [ 977.071749] RBP: 00007f73b9e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 977.072503] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 977.073273] R13: 00007ffe5499766f R14: 00007f73b9e18300 R15: 0000000000022000 [ 977.108420] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:18:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:18:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:18:23 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) (fail_nth: 3) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 991.799620] FAULT_INJECTION: forcing a failure. [ 991.799620] name failslab, interval 1, probability 0, space 0, times 1 [ 991.802129] CPU: 1 PID: 14548 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 991.803729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.805649] Call Trace: [ 991.806252] dump_stack+0x107/0x167 [ 991.807101] should_fail.cold+0x5/0xa [ 991.807975] ? __build_skb+0x21/0x60 [ 991.808828] should_failslab+0x5/0x20 [ 991.809695] kmem_cache_alloc+0x5b/0x310 [ 991.810625] __build_skb+0x21/0x60 [ 991.811436] build_skb+0x1a/0x220 [ 991.812228] __tun_build_skb+0x2c/0x260 21:18:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:18:23 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 991.813149] tun_build_skb+0x62c/0xfe0 [ 991.814328] ? tun_xdp_act+0x6f0/0x6f0 [ 991.815223] ? __lock_acquire+0xbb1/0x5b00 [ 991.816220] tun_get_user+0x6c1/0x32f0 [ 991.817152] ? usage_accumulate+0xe0/0x110 [ 991.818162] ? tun_build_skb+0xfe0/0xfe0 [ 991.819103] ? __tun_detach+0x4e0/0x12b0 [ 991.820043] ? lock_downgrade+0x6d0/0x6d0 [ 991.821007] ? perf_trace_lock+0xac/0x490 [ 991.821957] ? SOFTIRQ_verbose+0x10/0x10 [ 991.822910] tun_chr_write_iter+0xe1/0x1e0 [ 991.823885] new_sync_write+0x42c/0x660 [ 991.824791] ? new_sync_read+0x6f0/0x6f0 [ 991.825730] ? avc_policy_seqno+0x9/0x70 [ 991.826659] ? selinux_file_permission+0x92/0x520 [ 991.827768] ? security_file_permission+0xb1/0xe0 [ 991.828887] vfs_write+0x7c0/0xb10 [ 991.829724] ksys_write+0x12d/0x260 [ 991.830564] ? __ia32_sys_read+0xb0/0xb0 [ 991.831492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.832740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.833929] do_syscall_64+0x33/0x40 [ 991.834793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.835988] RIP: 0033:0x7f73bc8555ff [ 991.836849] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 991.841093] RSP: 002b:00007f73b9e18150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 991.842856] RAX: ffffffffffffffda RBX: 00007f73bc9b5f60 RCX: 00007f73bc8555ff [ 991.844498] RDX: 0000000000000072 RSI: 0000000020000140 RDI: 00000000000000f0 [ 991.846146] RBP: 00007f73b9e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.847798] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 991.849430] R13: 00007ffe5499766f R14: 00007f73b9e18300 R15: 0000000000022000 21:18:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 991.856067] FAULT_INJECTION: forcing a failure. [ 991.856067] name failslab, interval 1, probability 0, space 0, times 0 [ 991.857600] CPU: 0 PID: 14539 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 991.858433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.859412] Call Trace: [ 991.859743] dump_stack+0x107/0x167 [ 991.860189] should_fail.cold+0x5/0xa [ 991.860673] ? perf_event_alloc.part.0+0x5b/0x2b70 [ 991.861267] should_failslab+0x5/0x20 [ 991.861740] kmem_cache_alloc_trace+0x55/0x320 [ 991.862309] perf_event_alloc.part.0+0x5b/0x2b70 [ 991.862865] ? alloc_fd+0x2e7/0x670 [ 991.863325] __do_sys_perf_event_open+0x579/0x2e60 [ 991.863935] ? __mutex_unlock_slowpath+0xe1/0x600 [ 991.864509] ? perf_event_set_output+0x5b0/0x5b0 [ 991.865110] ? wait_for_completion_io+0x270/0x270 [ 991.865693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.866329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 991.866948] do_syscall_64+0x33/0x40 [ 991.867393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.868023] RIP: 0033:0x7f235e5b8b19 [ 991.868476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.870661] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 991.871561] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 991.872428] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 991.873158] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.873839] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 991.874524] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:18:23 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 991.930716] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) (fail_nth: 4) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:18:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:18:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 992.284066] FAULT_INJECTION: forcing a failure. [ 992.284066] name failslab, interval 1, probability 0, space 0, times 0 [ 992.285588] CPU: 1 PID: 14668 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 992.286197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.286920] Call Trace: [ 992.287162] dump_stack+0x107/0x167 [ 992.287490] should_fail.cold+0x5/0xa [ 992.287673] FAULT_INJECTION: forcing a failure. [ 992.287673] name failslab, interval 1, probability 0, space 0, times 0 [ 992.287824] ? create_object.isra.0+0x3a/0xa20 [ 992.287845] should_failslab+0x5/0x20 [ 992.289547] kmem_cache_alloc+0x5b/0x310 [ 992.289896] create_object.isra.0+0x3a/0xa20 [ 992.290267] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 992.290715] kmem_cache_alloc+0x159/0x310 [ 992.291071] __build_skb+0x21/0x60 [ 992.291382] build_skb+0x1a/0x220 [ 992.291692] __tun_build_skb+0x2c/0x260 [ 992.292030] tun_build_skb+0x62c/0xfe0 [ 992.292380] ? tun_xdp_act+0x6f0/0x6f0 [ 992.292765] ? __lock_acquire+0xbb1/0x5b00 [ 992.293139] tun_get_user+0x6c1/0x32f0 [ 992.293484] ? usage_accumulate+0xe0/0x110 [ 992.293854] ? tun_build_skb+0xfe0/0xfe0 [ 992.294200] ? __tun_detach+0x4e0/0x12b0 [ 992.294564] ? lock_downgrade+0x6d0/0x6d0 [ 992.294914] ? perf_trace_lock+0xac/0x490 [ 992.295263] ? SOFTIRQ_verbose+0x10/0x10 [ 992.295632] tun_chr_write_iter+0xe1/0x1e0 [ 992.295997] new_sync_write+0x42c/0x660 [ 992.296338] ? new_sync_read+0x6f0/0x6f0 [ 992.296746] ? avc_policy_seqno+0x9/0x70 [ 992.297096] ? selinux_file_permission+0x92/0x520 [ 992.297525] ? security_file_permission+0xb1/0xe0 [ 992.297937] vfs_write+0x7c0/0xb10 [ 992.298242] ksys_write+0x12d/0x260 [ 992.298568] ? __ia32_sys_read+0xb0/0xb0 [ 992.298915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.299362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.299807] do_syscall_64+0x33/0x40 [ 992.300121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.300589] RIP: 0033:0x7f73bc8555ff [ 992.300924] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 992.302490] RSP: 002b:00007f73b9e18150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 992.303131] RAX: ffffffffffffffda RBX: 00007f73bc9b5f60 RCX: 00007f73bc8555ff [ 992.303742] RDX: 0000000000000072 RSI: 0000000020000140 RDI: 00000000000000f0 [ 992.304341] RBP: 00007f73b9e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.304987] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 992.305605] R13: 00007ffe5499766f R14: 00007f73b9e18300 R15: 0000000000022000 [ 992.306229] CPU: 0 PID: 14669 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 992.306849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.307564] Call Trace: [ 992.307799] dump_stack+0x107/0x167 [ 992.308122] should_fail.cold+0x5/0xa [ 992.308450] ? create_object.isra.0+0x3a/0xa20 [ 992.308894] should_failslab+0x5/0x20 [ 992.309220] kmem_cache_alloc+0x5b/0x310 [ 992.309571] create_object.isra.0+0x3a/0xa20 [ 992.309962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 992.310402] kmem_cache_alloc_trace+0x151/0x320 [ 992.310798] perf_event_alloc.part.0+0x5b/0x2b70 [ 992.311221] ? alloc_fd+0x2e7/0x670 [ 992.311548] __do_sys_perf_event_open+0x579/0x2e60 [ 992.311969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 992.312392] ? perf_event_set_output+0x5b0/0x5b0 [ 992.312815] ? wait_for_completion_io+0x270/0x270 [ 992.313257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.313695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.314125] do_syscall_64+0x33/0x40 [ 992.314453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.314881] RIP: 0033:0x7f235e5b8b19 [ 992.315193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.316778] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 992.317424] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 992.318027] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 992.318641] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.319230] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 992.319831] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:18:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 992.379977] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:18:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:18:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) (fail_nth: 5) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:18:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 992.562793] FAULT_INJECTION: forcing a failure. [ 992.562793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.564139] CPU: 0 PID: 14685 Comm: syz-executor.2 Not tainted 5.10.223 #1 [ 992.564805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.565532] Call Trace: [ 992.565789] dump_stack+0x107/0x167 [ 992.566117] should_fail.cold+0x5/0xa [ 992.566478] _copy_to_user+0x2e/0x180 [ 992.566834] simple_read_from_buffer+0xcc/0x160 [ 992.567286] proc_fail_nth_read+0x198/0x230 [ 992.567694] ? proc_sessionid_read+0x230/0x230 [ 992.568134] ? security_file_permission+0xb1/0xe0 [ 992.568591] ? proc_sessionid_read+0x230/0x230 [ 992.569006] vfs_read+0x228/0x620 [ 992.569315] ksys_read+0x12d/0x260 [ 992.569633] ? vfs_write+0xb10/0xb10 [ 992.569969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.570451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.570909] do_syscall_64+0x33/0x40 [ 992.571260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.571708] RIP: 0033:0x7f73bc85569c [ 992.572031] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 992.573627] RSP: 002b:00007f73b9e18170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 992.574279] RAX: ffffffffffffffda RBX: 0000000000000072 RCX: 00007f73bc85569c [ 992.574880] RDX: 000000000000000f RSI: 00007f73b9e181e0 RDI: 0000000000000004 [ 992.575496] RBP: 00007f73b9e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.576099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.576742] R13: 00007ffe5499766f R14: 00007f73b9e18300 R15: 0000000000022000 21:18:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 992.611184] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:18:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x0, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:18:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:38 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:18:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:18:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:18:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1007.698892] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1007.701613] FAULT_INJECTION: forcing a failure. [ 1007.701613] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.703079] CPU: 0 PID: 14808 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1007.703694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1007.704416] Call Trace: [ 1007.704649] dump_stack+0x107/0x167 [ 1007.705272] should_fail.cold+0x5/0xa [ 1007.705947] should_failslab+0x5/0x20 [ 1007.706611] __kmalloc_track_caller+0x79/0x370 [ 1007.707407] ? strndup_user+0x74/0xe0 [ 1007.708081] memdup_user+0x22/0xd0 [ 1007.708705] strndup_user+0x74/0xe0 [ 1007.709542] perf_uprobe_init+0x6b/0x210 [ 1007.710275] perf_uprobe_event_init+0xff/0x1d0 [ 1007.711084] perf_try_init_event+0x130/0x570 [ 1007.711860] perf_event_alloc.part.0+0xd96/0x2b70 [ 1007.712747] __do_sys_perf_event_open+0x579/0x2e60 [ 1007.713878] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1007.714712] ? perf_event_set_output+0x5b0/0x5b0 [ 1007.715526] ? wait_for_completion_io+0x270/0x270 [ 1007.716383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1007.717019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.717459] do_syscall_64+0x33/0x40 [ 1007.717774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1007.718202] RIP: 0033:0x7f235e5b8b19 [ 1007.718519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.720051] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1007.720693] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1007.721338] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1007.721937] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.722535] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1007.723135] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:18:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xd, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1008.087625] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:18:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7f) 21:18:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:54 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:18:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:18:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:18:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:18:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x0, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:18:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:18:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:18:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1023.454721] FAULT_INJECTION: forcing a failure. [ 1023.454721] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.456041] CPU: 0 PID: 15037 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1023.456669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.457436] Call Trace: [ 1023.457695] dump_stack+0x107/0x167 [ 1023.458041] should_fail.cold+0x5/0xa [ 1023.458406] ? create_object.isra.0+0x3a/0xa20 [ 1023.458847] should_failslab+0x5/0x20 [ 1023.459208] kmem_cache_alloc+0x5b/0x310 [ 1023.459596] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1023.460080] create_object.isra.0+0x3a/0xa20 [ 1023.460490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1023.460983] __kmalloc_track_caller+0x177/0x370 [ 1023.461965] ? strndup_user+0x74/0xe0 [ 1023.462676] memdup_user+0x22/0xd0 [ 1023.463351] strndup_user+0x74/0xe0 [ 1023.463514] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1023.463993] perf_uprobe_init+0x6b/0x210 [ 1023.465654] perf_uprobe_event_init+0xff/0x1d0 [ 1023.466082] perf_try_init_event+0x130/0x570 [ 1023.466486] perf_event_alloc.part.0+0xd96/0x2b70 [ 1023.466951] __do_sys_perf_event_open+0x579/0x2e60 [ 1023.467417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1023.467871] ? perf_event_set_output+0x5b0/0x5b0 [ 1023.468310] ? wait_for_completion_io+0x270/0x270 [ 1023.468784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1023.477299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1023.477789] do_syscall_64+0x33/0x40 [ 1023.478135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.478602] RIP: 0033:0x7f235e5b8b19 [ 1023.478938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.480590] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1023.485310] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1023.485948] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1023.486584] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.487231] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1023.487879] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:18:54 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1023.579089] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1037.983092] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:19:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x0, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:19:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:19:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:09 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1038.196920] FAULT_INJECTION: forcing a failure. [ 1038.196920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.198007] CPU: 1 PID: 15275 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1038.198586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.199269] Call Trace: [ 1038.199504] dump_stack+0x107/0x167 [ 1038.199824] should_fail.cold+0x5/0xa [ 1038.200155] _copy_from_user+0x2e/0x1b0 [ 1038.200515] memdup_user+0x65/0xd0 [ 1038.200819] strndup_user+0x74/0xe0 [ 1038.201334] perf_uprobe_init+0x6b/0x210 [ 1038.202328] perf_uprobe_event_init+0xff/0x1d0 [ 1038.203327] perf_try_init_event+0x130/0x570 [ 1038.204288] perf_event_alloc.part.0+0xd96/0x2b70 [ 1038.205411] __do_sys_perf_event_open+0x579/0x2e60 [ 1038.206494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.207550] ? perf_event_set_output+0x5b0/0x5b0 [ 1038.208576] ? wait_for_completion_io+0x270/0x270 [ 1038.209704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.210844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1038.211972] do_syscall_64+0x33/0x40 [ 1038.212790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.214021] RIP: 0033:0x7f235e5b8b19 [ 1038.214848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.218956] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1038.220636] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1038.222261] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1038.223839] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.225472] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1038.227046] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:19:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x200001b2, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1038.331643] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x7f) 21:19:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:19:09 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1038.504964] FAULT_INJECTION: forcing a failure. [ 1038.504964] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.507964] CPU: 1 PID: 15395 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1038.509595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.511520] Call Trace: [ 1038.512146] dump_stack+0x107/0x167 [ 1038.512937] should_fail.cold+0x5/0xa [ 1038.513862] ? getname_kernel+0x4e/0x370 [ 1038.514838] should_failslab+0x5/0x20 [ 1038.515711] kmem_cache_alloc+0x5b/0x310 [ 1038.516640] ? lock_downgrade+0x6d0/0x6d0 [ 1038.517626] getname_kernel+0x4e/0x370 [ 1038.518527] kern_path+0x1b/0x40 [ 1038.519314] create_local_trace_uprobe+0x86/0x4e0 [ 1038.520415] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1038.521494] ? memdup_user+0x7c/0xd0 [ 1038.522358] perf_uprobe_init+0x136/0x210 [ 1038.523312] perf_uprobe_event_init+0xff/0x1d0 [ 1038.524359] perf_try_init_event+0x130/0x570 [ 1038.525382] perf_event_alloc.part.0+0xd96/0x2b70 [ 1038.526507] __do_sys_perf_event_open+0x579/0x2e60 [ 1038.527629] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.528729] ? perf_event_set_output+0x5b0/0x5b0 [ 1038.529811] ? wait_for_completion_io+0x270/0x270 [ 1038.530922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.532178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1038.533363] do_syscall_64+0x33/0x40 [ 1038.534225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.535395] RIP: 0033:0x7f235e5b8b19 [ 1038.536276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.540495] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1038.542287] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1038.543887] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1038.545545] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.547215] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1038.548813] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:19:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x0, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:19:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1038.648555] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:09 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:19:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x0, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:19:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:19:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:19:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:19:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1053.265958] FAULT_INJECTION: forcing a failure. [ 1053.265958] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.267514] CPU: 0 PID: 15631 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1053.268092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.268789] Call Trace: [ 1053.269023] dump_stack+0x107/0x167 [ 1053.269363] should_fail.cold+0x5/0xa [ 1053.269692] ? create_object.isra.0+0x3a/0xa20 [ 1053.270079] should_failslab+0x5/0x20 [ 1053.270404] kmem_cache_alloc+0x5b/0x310 [ 1053.270751] create_object.isra.0+0x3a/0xa20 [ 1053.271122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1053.271554] kmem_cache_alloc+0x159/0x310 [ 1053.271916] getname_kernel+0x4e/0x370 [ 1053.272246] kern_path+0x1b/0x40 [ 1053.272535] create_local_trace_uprobe+0x86/0x4e0 [ 1053.272941] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1053.273347] ? memdup_user+0x7c/0xd0 [ 1053.273669] perf_uprobe_init+0x136/0x210 [ 1053.274024] perf_uprobe_event_init+0xff/0x1d0 [ 1053.274412] perf_try_init_event+0x130/0x570 [ 1053.274787] perf_event_alloc.part.0+0xd96/0x2b70 [ 1053.275211] __do_sys_perf_event_open+0x579/0x2e60 [ 1053.275644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1053.276074] ? perf_event_set_output+0x5b0/0x5b0 [ 1053.276488] ? wait_for_completion_io+0x270/0x270 [ 1053.276921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.277384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.277824] do_syscall_64+0x33/0x40 [ 1053.278141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.278575] RIP: 0033:0x7f235e5b8b19 [ 1053.278898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.280435] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1053.281077] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1053.281691] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1053.282299] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.282897] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1053.283497] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1053.293966] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1053.455923] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x500, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1053.621646] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:19:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) 21:19:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x0, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:19:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:19:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) [ 1053.853893] FAULT_INJECTION: forcing a failure. [ 1053.853893] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.856819] CPU: 0 PID: 15764 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1053.857690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.858397] Call Trace: [ 1053.858633] dump_stack+0x107/0x167 [ 1053.858949] should_fail.cold+0x5/0xa [ 1053.859278] ? igrab+0xc0/0xc0 [ 1053.859560] ? proc_self_get_link+0x18b/0x200 [ 1053.859948] should_failslab+0x5/0x20 [ 1053.860290] kmem_cache_alloc_trace+0x55/0x320 [ 1053.860694] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 1053.861081] proc_self_get_link+0x18b/0x200 [ 1053.861755] step_into+0x1595/0x1ce0 [ 1053.862407] ? lookup_fast+0x6e0/0x6e0 [ 1053.863078] ? try_to_unlazy_next+0x4f0/0x4f0 [ 1053.863868] walk_component+0x171/0x6a0 [ 1053.864556] ? trace_hardirqs_on+0x5b/0x180 [ 1053.865294] ? handle_dots.part.0+0x15c0/0x15c0 [ 1053.865697] ? security_inode_permission+0xcb/0x100 [ 1053.866127] link_path_walk.part.0+0x699/0xbf0 [ 1053.866525] ? walk_component+0x6a0/0x6a0 [ 1053.866882] ? perf_trace_lock+0xac/0x490 [ 1053.867246] path_lookupat+0xb7/0x860 [ 1053.867577] filename_lookup+0x1b1/0x570 [ 1053.867929] ? may_linkat+0x230/0x230 [ 1053.868268] ? trace_hardirqs_on+0x5b/0x180 [ 1053.868643] ? memcpy+0x39/0x60 [ 1053.868926] ? getname_kernel+0x21e/0x370 [ 1053.869325] create_local_trace_uprobe+0x86/0x4e0 [ 1053.869735] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1053.870135] ? memdup_user+0x7c/0xd0 [ 1053.870460] perf_uprobe_init+0x136/0x210 [ 1053.870820] perf_uprobe_event_init+0xff/0x1d0 [ 1053.871211] perf_try_init_event+0x130/0x570 [ 1053.871590] perf_event_alloc.part.0+0xd96/0x2b70 [ 1053.872009] __do_sys_perf_event_open+0x579/0x2e60 [ 1053.872435] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1053.872846] ? perf_event_set_output+0x5b0/0x5b0 [ 1053.873276] ? wait_for_completion_io+0x270/0x270 [ 1053.873723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.874173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.874612] do_syscall_64+0x33/0x40 [ 1053.874930] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1053.875365] RIP: 0033:0x7f235e5b8b19 [ 1053.875683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.877261] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1053.877913] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1053.878513] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1053.879118] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.879717] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1053.880323] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:19:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:19:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x0, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:19:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:19:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x806, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:19:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) [ 1068.479003] FAULT_INJECTION: forcing a failure. [ 1068.479003] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.480503] CPU: 0 PID: 15873 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1068.481415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.483329] Call Trace: [ 1068.483938] dump_stack+0x107/0x167 [ 1068.484754] should_fail.cold+0x5/0xa [ 1068.485704] ? find_held_lock+0x2c/0x110 [ 1068.486725] ? create_object.isra.0+0x3a/0xa20 [ 1068.487874] should_failslab+0x5/0x20 [ 1068.488824] kmem_cache_alloc+0x5b/0x310 [ 1068.489831] ? __task_pid_nr_ns+0x16a/0x4f0 [ 1068.490909] create_object.isra.0+0x3a/0xa20 [ 1068.492012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1068.493022] kmem_cache_alloc_trace+0x151/0x320 [ 1068.493941] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 1068.495013] proc_self_get_link+0x18b/0x200 [ 1068.496167] step_into+0x1595/0x1ce0 [ 1068.497119] ? lookup_fast+0x6e0/0x6e0 [ 1068.498062] ? try_to_unlazy_next+0x4f0/0x4f0 [ 1068.499243] walk_component+0x171/0x6a0 [ 1068.500227] ? trace_hardirqs_on+0x5b/0x180 [ 1068.501309] ? handle_dots.part.0+0x15c0/0x15c0 [ 1068.502475] ? security_inode_permission+0xcb/0x100 [ 1068.503748] link_path_walk.part.0+0x699/0xbf0 [ 1068.504872] ? walk_component+0x6a0/0x6a0 [ 1068.505489] ? perf_trace_lock+0xac/0x490 [ 1068.506637] path_lookupat+0xb7/0x860 [ 1068.507649] filename_lookup+0x1b1/0x570 [ 1068.508119] ? may_linkat+0x230/0x230 [ 1068.509067] ? trace_hardirqs_on+0x5b/0x180 [ 1068.511668] ? memcpy+0x39/0x60 [ 1068.512453] ? getname_kernel+0x21e/0x370 [ 1068.513431] create_local_trace_uprobe+0x86/0x4e0 [ 1068.514583] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1068.515653] ? memdup_user+0x7c/0xd0 [ 1068.516622] perf_uprobe_init+0x136/0x210 [ 1068.517518] perf_uprobe_event_init+0xff/0x1d0 [ 1068.517936] perf_try_init_event+0x130/0x570 [ 1068.518362] perf_event_alloc.part.0+0xd96/0x2b70 [ 1068.518832] __do_sys_perf_event_open+0x579/0x2e60 [ 1068.519286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1068.519755] ? perf_event_set_output+0x5b0/0x5b0 [ 1068.520214] ? wait_for_completion_io+0x270/0x270 [ 1068.520692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1068.521196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.522168] do_syscall_64+0x33/0x40 [ 1068.522530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1068.523020] RIP: 0033:0x7f235e5b8b19 [ 1068.523376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.528438] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1068.530298] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1068.530323] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1068.530330] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1068.530344] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.538907] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1068.539832] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:19:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:19:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x4305, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1068.680430] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1068.710002] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:55 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:19:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8035, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:19:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:19:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) 21:19:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:19:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x0, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1083.932109] FAULT_INJECTION: forcing a failure. [ 1083.932109] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.933359] CPU: 1 PID: 16121 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1083.933958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.934657] Call Trace: [ 1083.934900] dump_stack+0x107/0x167 [ 1083.935213] should_fail.cold+0x5/0xa [ 1083.935545] ? alloc_trace_uprobe+0x3d/0x2b0 [ 1083.935934] should_failslab+0x5/0x20 [ 1083.936260] __kmalloc+0x72/0x390 [ 1083.936557] ? memcpy+0x39/0x60 [ 1083.936847] alloc_trace_uprobe+0x3d/0x2b0 [ 1083.937220] create_local_trace_uprobe+0x101/0x4e0 [ 1083.937649] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1083.938055] ? memdup_user+0x7c/0xd0 [ 1083.938381] perf_uprobe_init+0x136/0x210 [ 1083.938741] perf_uprobe_event_init+0xff/0x1d0 [ 1083.939141] perf_try_init_event+0x130/0x570 [ 1083.939518] perf_event_alloc.part.0+0xd96/0x2b70 [ 1083.939938] __do_sys_perf_event_open+0x579/0x2e60 [ 1083.940373] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1083.940782] ? perf_event_set_output+0x5b0/0x5b0 [ 1083.941194] ? wait_for_completion_io+0x270/0x270 [ 1083.941632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.942082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.942533] do_syscall_64+0x33/0x40 [ 1083.942852] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1083.943295] RIP: 0033:0x7f235e5b8b19 [ 1083.943614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.945164] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1083.945830] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1083.946434] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1083.947122] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.947733] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1083.948333] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1083.949170] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1083.954691] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:19:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:19:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8102, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1084.212533] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:19:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:19:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:19:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:19:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x0, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:19:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1084.369059] FAULT_INJECTION: forcing a failure. [ 1084.369059] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.370493] CPU: 0 PID: 16248 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1084.371135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1084.371894] Call Trace: [ 1084.372150] dump_stack+0x107/0x167 [ 1084.372491] should_fail.cold+0x5/0xa [ 1084.372854] ? alloc_trace_uprobe+0x3d/0x2b0 [ 1084.373280] should_failslab+0x5/0x20 [ 1084.373647] __kmalloc+0x72/0x390 [ 1084.373988] ? memcpy+0x39/0x60 [ 1084.374311] alloc_trace_uprobe+0x3d/0x2b0 [ 1084.374695] create_local_trace_uprobe+0x101/0x4e0 [ 1084.375167] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1084.375596] ? memdup_user+0x7c/0xd0 [ 1084.375952] perf_uprobe_init+0x136/0x210 [ 1084.376361] perf_uprobe_event_init+0xff/0x1d0 [ 1084.376790] perf_try_init_event+0x130/0x570 [ 1084.377221] perf_event_alloc.part.0+0xd96/0x2b70 [ 1084.377710] __do_sys_perf_event_open+0x579/0x2e60 [ 1084.378182] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1084.378649] ? perf_event_set_output+0x5b0/0x5b0 [ 1084.379092] ? wait_for_completion_io+0x270/0x270 [ 1084.379582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1084.380063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1084.380558] do_syscall_64+0x33/0x40 [ 1084.380909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1084.381413] RIP: 0033:0x7f235e5b8b19 [ 1084.381780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1084.383450] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1084.384162] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1084.384833] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1084.385484] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.386166] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1084.386838] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1084.387593] trace_uprobe: Failed to allocate trace_uprobe.(-12) 21:20:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:10 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:20:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x0, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:20:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:20:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8103, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:20:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:20:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:20:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1099.369655] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1099.645507] FAULT_INJECTION: forcing a failure. [ 1099.645507] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.646567] CPU: 1 PID: 16373 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1099.647143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.647843] Call Trace: [ 1099.648074] dump_stack+0x107/0x167 [ 1099.648390] should_fail.cold+0x5/0xa [ 1099.648719] ? trace_probe_init+0x6a/0x4e0 [ 1099.649082] should_failslab+0x5/0x20 [ 1099.649407] __kmalloc+0x72/0x390 [ 1099.649704] ? trace_hardirqs_on+0x5b/0x180 [ 1099.654093] trace_probe_init+0x6a/0x4e0 [ 1099.654443] alloc_trace_uprobe+0x63/0x2b0 [ 1099.654799] create_local_trace_uprobe+0x101/0x4e0 [ 1099.655220] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1099.655610] ? memdup_user+0x7c/0xd0 [ 1099.655930] perf_uprobe_init+0x136/0x210 [ 1099.656289] perf_uprobe_event_init+0xff/0x1d0 [ 1099.656672] perf_try_init_event+0x130/0x570 [ 1099.657043] perf_event_alloc.part.0+0xd96/0x2b70 [ 1099.657454] __do_sys_perf_event_open+0x579/0x2e60 [ 1099.657882] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1099.658286] ? perf_event_set_output+0x5b0/0x5b0 [ 1099.658679] ? wait_for_completion_io+0x270/0x270 [ 1099.659102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.659541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.659973] do_syscall_64+0x33/0x40 [ 1099.660285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1099.660713] RIP: 0033:0x7f235e5b8b19 [ 1099.661026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.666569] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1099.667206] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1099.667800] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1099.668392] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.668984] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1099.669582] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1099.674613] trace_uprobe: Failed to allocate trace_uprobe.(-12) 21:20:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8105, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1099.784781] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:20:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:20:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:20:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:20:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x0, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:20:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) [ 1100.350175] FAULT_INJECTION: forcing a failure. [ 1100.350175] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.351647] CPU: 0 PID: 16599 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1100.352337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.353126] Call Trace: [ 1100.353393] dump_stack+0x107/0x167 [ 1100.353753] should_fail.cold+0x5/0xa [ 1100.354196] ? trace_probe_init+0x6a/0x4e0 [ 1100.354590] should_failslab+0x5/0x20 [ 1100.355017] __kmalloc+0x72/0x390 [ 1100.355356] ? trace_hardirqs_on+0x5b/0x180 [ 1100.355773] trace_probe_init+0x6a/0x4e0 [ 1100.356173] alloc_trace_uprobe+0x63/0x2b0 [ 1100.356526] create_local_trace_uprobe+0x101/0x4e0 [ 1100.356987] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1100.357380] ? memdup_user+0x7c/0xd0 21:20:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1100.357697] perf_uprobe_init+0x136/0x210 [ 1100.358126] perf_uprobe_event_init+0xff/0x1d0 [ 1100.358507] perf_try_init_event+0x130/0x570 [ 1100.358874] perf_event_alloc.part.0+0xd96/0x2b70 [ 1100.359347] __do_sys_perf_event_open+0x579/0x2e60 [ 1100.359912] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1100.360397] ? perf_event_set_output+0x5b0/0x5b0 [ 1100.360788] ? wait_for_completion_io+0x270/0x270 [ 1100.361325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.361785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.362794] do_syscall_64+0x33/0x40 [ 1100.363168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1100.363597] RIP: 0033:0x7f235e5b8b19 [ 1100.363983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:20:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8160, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1100.365595] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1100.366281] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1100.366887] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1100.367530] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.368159] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1100.368763] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1100.369916] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1100.487565] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:20:11 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:20:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) 21:20:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:20:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 15) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:20:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8164, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1100.590037] FAULT_INJECTION: forcing a failure. [ 1100.590037] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.591560] CPU: 1 PID: 16717 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1100.592231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.593038] Call Trace: [ 1100.593297] dump_stack+0x107/0x167 [ 1100.593653] should_fail.cold+0x5/0xa [ 1100.594033] should_failslab+0x5/0x20 [ 1100.594404] __kmalloc_track_caller+0x79/0x370 [ 1100.594856] ? trace_probe_init+0x227/0x4e0 [ 1100.595274] kstrdup+0x36/0x70 [ 1100.595595] trace_probe_init+0x227/0x4e0 [ 1100.596005] alloc_trace_uprobe+0x63/0x2b0 [ 1100.596413] create_local_trace_uprobe+0x101/0x4e0 [ 1100.596899] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1100.601911] ? memdup_user+0x7c/0xd0 [ 1100.602259] perf_uprobe_init+0x136/0x210 [ 1100.603262] perf_uprobe_event_init+0xff/0x1d0 [ 1100.603734] perf_try_init_event+0x130/0x570 [ 1100.604200] perf_event_alloc.part.0+0xd96/0x2b70 [ 1100.605296] __do_sys_perf_event_open+0x579/0x2e60 [ 1100.610139] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1100.610557] ? perf_event_set_output+0x5b0/0x5b0 [ 1100.611021] ? tick_program_event+0xa8/0x140 [ 1100.611460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.611969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.612460] do_syscall_64+0x33/0x40 [ 1100.612819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1100.613297] RIP: 0033:0x7f235e5b8b19 [ 1100.613658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.619288] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1100.620014] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1100.620689] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1100.621361] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.622070] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1100.622747] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1100.623774] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1100.715717] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1100.777168] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:20:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:20:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:27 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:20:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x0, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:20:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) 21:20:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8847, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:20:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:20:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) [ 1116.110507] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1116.460880] FAULT_INJECTION: forcing a failure. [ 1116.460880] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.463007] CPU: 0 PID: 17050 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1116.464634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.466379] Call Trace: [ 1116.466612] dump_stack+0x107/0x167 [ 1116.466924] should_fail.cold+0x5/0xa [ 1116.468337] ? create_object.isra.0+0x3a/0xa20 [ 1116.468727] should_failslab+0x5/0x20 [ 1116.469051] kmem_cache_alloc+0x5b/0x310 [ 1116.470451] ? lock_downgrade+0x6d0/0x6d0 [ 1116.470805] create_object.isra.0+0x3a/0xa20 [ 1116.472254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1116.472687] __kmalloc_track_caller+0x177/0x370 [ 1116.474118] ? trace_probe_init+0x227/0x4e0 [ 1116.474508] kstrdup+0x36/0x70 [ 1116.474782] trace_probe_init+0x227/0x4e0 [ 1116.476217] alloc_trace_uprobe+0x63/0x2b0 [ 1116.476576] create_local_trace_uprobe+0x101/0x4e0 [ 1116.476988] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1116.478432] ? memdup_user+0x7c/0xd0 [ 1116.478755] perf_uprobe_init+0x136/0x210 [ 1116.480166] perf_uprobe_event_init+0xff/0x1d0 [ 1116.480557] perf_try_init_event+0x130/0x570 [ 1116.480930] perf_event_alloc.part.0+0xd96/0x2b70 [ 1116.482403] __do_sys_perf_event_open+0x579/0x2e60 [ 1116.482825] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1116.484282] ? perf_event_set_output+0x5b0/0x5b0 [ 1116.484682] ? wait_for_completion_io+0x270/0x270 [ 1116.486171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1116.486626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1116.487063] do_syscall_64+0x33/0x40 [ 1116.488428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1116.488859] RIP: 0033:0x7f235e5b8b19 [ 1116.490256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1116.492832] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1116.494528] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1116.496175] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1116.500646] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.501336] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1116.501999] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:20:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:20:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) 21:20:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x0, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:20:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) faccessat(r0, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:20:27 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8848, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1116.701725] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:20:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x0, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:20:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) faccessat(r0, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:20:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8864, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:20:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 17) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:20:44 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:20:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:20:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) [ 1133.353730] FAULT_INJECTION: forcing a failure. [ 1133.353730] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.354861] CPU: 1 PID: 17187 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1133.355496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.356254] Call Trace: [ 1133.356499] dump_stack+0x107/0x167 [ 1133.356839] should_fail.cold+0x5/0xa [ 1133.357242] should_failslab+0x5/0x20 [ 1133.357583] __kmalloc_track_caller+0x79/0x370 [ 1133.358045] ? trace_probe_init+0x284/0x4e0 [ 1133.358459] kstrdup+0x36/0x70 [ 1133.358744] trace_probe_init+0x284/0x4e0 [ 1133.359121] alloc_trace_uprobe+0x63/0x2b0 [ 1133.359502] create_local_trace_uprobe+0x101/0x4e0 [ 1133.359933] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1133.360346] ? memdup_user+0x7c/0xd0 [ 1133.360681] perf_uprobe_init+0x136/0x210 [ 1133.361041] perf_uprobe_event_init+0xff/0x1d0 [ 1133.361447] perf_try_init_event+0x130/0x570 [ 1133.361824] perf_event_alloc.part.0+0xd96/0x2b70 [ 1133.362276] __do_sys_perf_event_open+0x579/0x2e60 [ 1133.362712] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1133.363120] ? perf_event_set_output+0x5b0/0x5b0 [ 1133.363538] ? wait_for_completion_io+0x270/0x270 [ 1133.363971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1133.364436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.364876] do_syscall_64+0x33/0x40 [ 1133.365209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1133.365660] RIP: 0033:0x7f235e5b8b19 [ 1133.365975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.367569] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1133.368211] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1133.368827] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1133.369492] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.370093] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1133.370709] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1133.371628] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1133.381163] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:20:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:20:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:20:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) 21:20:44 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8906, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:20:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) faccessat(r0, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1133.563119] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1133.620802] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:20:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x0, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:20:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:20:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:20:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) 21:20:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 18) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:20:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) 21:20:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:20:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1148.688543] FAULT_INJECTION: forcing a failure. [ 1148.688543] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.690579] CPU: 1 PID: 17319 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1148.691291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.692092] Call Trace: [ 1148.692351] dump_stack+0x107/0x167 [ 1148.692703] should_fail.cold+0x5/0xa [ 1148.693397] ? create_object.isra.0+0x3a/0xa20 [ 1148.693867] should_failslab+0x5/0x20 [ 1148.694715] kmem_cache_alloc+0x5b/0x310 [ 1148.695602] create_object.isra.0+0x3a/0xa20 [ 1148.696557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1148.697666] __kmalloc_track_caller+0x177/0x370 [ 1148.698693] ? trace_probe_init+0x284/0x4e0 [ 1148.699643] kstrdup+0x36/0x70 [ 1148.700344] trace_probe_init+0x284/0x4e0 [ 1148.701257] alloc_trace_uprobe+0x63/0x2b0 [ 1148.702178] create_local_trace_uprobe+0x101/0x4e0 [ 1148.703257] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1148.704253] ? memdup_user+0x7c/0xd0 [ 1148.705064] perf_uprobe_init+0x136/0x210 [ 1148.705968] perf_uprobe_event_init+0xff/0x1d0 [ 1148.706981] perf_try_init_event+0x130/0x570 [ 1148.707399] perf_event_alloc.part.0+0xd96/0x2b70 [ 1148.707870] __do_sys_perf_event_open+0x579/0x2e60 [ 1148.708343] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1148.708801] ? perf_event_set_output+0x5b0/0x5b0 [ 1148.709246] ? wait_for_completion_io+0x270/0x270 [ 1148.709725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.710217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.710725] do_syscall_64+0x33/0x40 [ 1148.711076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.711558] RIP: 0033:0x7f235e5b8b19 [ 1148.711910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.713625] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1148.714343] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1148.715008] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1148.715682] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.716356] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1148.717030] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:20:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) [ 1148.743835] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) [ 1148.806840] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1148.983815] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1149.025979] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1149.133475] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1149.172512] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:21:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 19) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:21:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:21:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:21:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) 21:21:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1164.192728] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1164.198088] FAULT_INJECTION: forcing a failure. [ 1164.198088] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.200978] CPU: 1 PID: 17473 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1164.202637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1164.204601] Call Trace: [ 1164.205233] dump_stack+0x107/0x167 [ 1164.206098] should_fail.cold+0x5/0xa [ 1164.207073] should_failslab+0x5/0x20 [ 1164.207957] __kmalloc_track_caller+0x79/0x370 [ 1164.208739] ? create_local_trace_uprobe+0x1af/0x4e0 [ 1164.209896] kstrdup+0x36/0x70 [ 1164.210639] create_local_trace_uprobe+0x1af/0x4e0 [ 1164.211756] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1164.212803] ? memdup_user+0x7c/0xd0 [ 1164.213655] perf_uprobe_init+0x136/0x210 [ 1164.214612] perf_uprobe_event_init+0xff/0x1d0 [ 1164.215663] perf_try_init_event+0x130/0x570 [ 1164.216663] perf_event_alloc.part.0+0xd96/0x2b70 [ 1164.217752] __do_sys_perf_event_open+0x579/0x2e60 [ 1164.218251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1164.219350] ? perf_event_set_output+0x5b0/0x5b0 [ 1164.220115] ? wait_for_completion_io+0x270/0x270 [ 1164.221218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1164.222402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1164.223587] do_syscall_64+0x33/0x40 [ 1164.224435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1164.225607] RIP: 0033:0x7f235e5b8b19 [ 1164.226418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.230445] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1164.232105] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1164.233659] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1164.235220] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.236764] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1164.238312] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:21:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:21:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:15 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1164.506556] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1164.546653] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:21:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:21:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:21:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) [ 1164.700519] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1164.747870] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 20) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:21:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8105, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1164.937048] FAULT_INJECTION: forcing a failure. [ 1164.937048] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.939044] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1164.940609] CPU: 0 PID: 17718 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1164.941229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1164.941970] Call Trace: [ 1164.942476] dump_stack+0x107/0x167 [ 1164.943368] should_fail.cold+0x5/0xa [ 1164.944285] ? create_object.isra.0+0x3a/0xa20 [ 1164.945384] should_failslab+0x5/0x20 [ 1164.946291] kmem_cache_alloc+0x5b/0x310 [ 1164.947281] create_object.isra.0+0x3a/0xa20 [ 1164.948333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1164.949543] __kmalloc_track_caller+0x177/0x370 [ 1164.950660] ? create_local_trace_uprobe+0x1af/0x4e0 [ 1164.951876] kstrdup+0x36/0x70 [ 1164.952650] create_local_trace_uprobe+0x1af/0x4e0 [ 1164.953816] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1164.954901] ? memdup_user+0x7c/0xd0 [ 1164.955609] perf_uprobe_init+0x136/0x210 [ 1164.956407] perf_uprobe_event_init+0xff/0x1d0 [ 1164.957271] perf_try_init_event+0x130/0x570 [ 1164.958104] perf_event_alloc.part.0+0xd96/0x2b70 [ 1164.959187] __do_sys_perf_event_open+0x579/0x2e60 [ 1164.960170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1164.961080] ? perf_event_set_output+0x5b0/0x5b0 [ 1164.961964] ? wait_for_completion_io+0x270/0x270 [ 1164.962707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1164.963200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1164.963687] do_syscall_64+0x33/0x40 [ 1164.964035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1164.964505] RIP: 0033:0x7f235e5b8b19 [ 1164.964858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.966640] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1164.968072] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1164.969419] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1164.970634] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.971290] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1164.971950] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1165.014486] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x500, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1165.054835] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1165.107863] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:21:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1165.283481] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) 21:21:32 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:21:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:21:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:21:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 21) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:21:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1181.098528] EXT4-fs warning: 2 callbacks suppressed [ 1181.098571] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1181.101859] FAULT_INJECTION: forcing a failure. [ 1181.101859] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.103483] CPU: 0 PID: 17953 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1181.104124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1181.104828] Call Trace: [ 1181.105140] dump_stack+0x107/0x167 [ 1181.105456] should_fail.cold+0x5/0xa [ 1181.105785] ? traceprobe_set_print_fmt+0x5a/0xd0 [ 1181.106260] should_failslab+0x5/0x20 [ 1181.106598] __kmalloc+0x72/0x390 [ 1181.106902] ? __kmalloc_track_caller+0x2c6/0x370 [ 1181.107372] traceprobe_set_print_fmt+0x5a/0xd0 [ 1181.107780] create_local_trace_uprobe+0x309/0x4e0 [ 1181.108253] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1181.108649] ? memdup_user+0x7c/0xd0 [ 1181.109044] perf_uprobe_init+0x136/0x210 [ 1181.109418] perf_uprobe_event_init+0xff/0x1d0 [ 1181.109811] perf_try_init_event+0x130/0x570 [ 1181.110242] perf_event_alloc.part.0+0xd96/0x2b70 21:21:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1181.110667] __do_sys_perf_event_open+0x579/0x2e60 [ 1181.111143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1181.111739] ? perf_event_set_output+0x5b0/0x5b0 [ 1181.112199] ? wait_for_completion_io+0x270/0x270 [ 1181.112641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1181.113173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1181.113627] do_syscall_64+0x33/0x40 [ 1181.113998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1181.114431] RIP: 0033:0x7f235e5b8b19 [ 1181.114788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1181.116417] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1181.117120] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1181.117734] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1181.118411] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1181.119071] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1181.119677] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1181.392104] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1196.533271] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x0) 21:21:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(0xffffffffffffffff, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:21:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 22) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:21:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9600, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xc318}, 0xda, 0x8, 0x3f, 0x2, 0xffffffffffffff81, 0x5, 0x80, 0x0, 0xfffff000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0)=0x2, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r1, r2, 0x0, 0x7f) 21:21:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:47 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:21:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1196.580716] FAULT_INJECTION: forcing a failure. [ 1196.580716] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.581812] CPU: 1 PID: 18183 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1196.582436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.583216] Call Trace: [ 1196.583450] dump_stack+0x107/0x167 [ 1196.583760] should_fail.cold+0x5/0xa [ 1196.584153] ? create_object.isra.0+0x3a/0xa20 [ 1196.584543] should_failslab+0x5/0x20 [ 1196.584866] kmem_cache_alloc+0x5b/0x310 [ 1196.585274] create_object.isra.0+0x3a/0xa20 [ 1196.585648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1196.586128] __kmalloc+0x16e/0x390 [ 1196.586437] ? __kmalloc_track_caller+0x2c6/0x370 [ 1196.586857] traceprobe_set_print_fmt+0x5a/0xd0 [ 1196.587332] create_local_trace_uprobe+0x309/0x4e0 [ 1196.587747] ? bpf_get_uprobe_info+0x3b0/0x3b0 [ 1196.588198] ? memdup_user+0x7c/0xd0 [ 1196.588529] perf_uprobe_init+0x136/0x210 [ 1196.588884] perf_uprobe_event_init+0xff/0x1d0 [ 1196.589326] perf_try_init_event+0x130/0x570 [ 1196.589709] perf_event_alloc.part.0+0xd96/0x2b70 [ 1196.590176] __do_sys_perf_event_open+0x579/0x2e60 [ 1196.590610] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1196.591096] ? perf_event_set_output+0x5b0/0x5b0 [ 1196.591501] ? wait_for_completion_io+0x270/0x270 [ 1196.591979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1196.592431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.592875] do_syscall_64+0x33/0x40 [ 1196.593241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1196.593677] RIP: 0033:0x7f235e5b8b19 [ 1196.594043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.598980] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1196.599634] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1196.600322] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1196.601234] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.601844] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1196.602496] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:21:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:21:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:47 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1196.775336] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1196.816960] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:21:48 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:21:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(0xffffffffffffffff, &(0x7f0000000740)='./file0/file1\x00', 0x301) [ 1196.933417] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1197.003346] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:03 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 23) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:22:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:22:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:03 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:22:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 1) 21:22:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 1) 21:22:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:22:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(0xffffffffffffffff, &(0x7f0000000740)='./file0/file1\x00', 0x301) 21:22:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, 0x0, 0x301) [ 1211.996661] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1212.050159] FAULT_INJECTION: forcing a failure. [ 1212.050159] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.051193] CPU: 1 PID: 18491 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1212.051778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.052479] Call Trace: [ 1212.052713] dump_stack+0x107/0x167 [ 1212.053030] should_fail.cold+0x5/0xa [ 1212.053363] ? alloc_pipe_info+0x10a/0x590 [ 1212.053731] should_failslab+0x5/0x20 [ 1212.054061] kmem_cache_alloc_trace+0x55/0x320 [ 1212.054461] alloc_pipe_info+0x10a/0x590 [ 1212.054813] ? SOFTIRQ_verbose+0x10/0x10 [ 1212.055192] splice_direct_to_actor+0x774/0x980 [ 1212.055598] ? _cond_resched+0x12/0x80 [ 1212.055934] ? inode_security+0x107/0x140 [ 1212.056290] ? pipe_to_sendpage+0x380/0x380 [ 1212.056663] ? avc_policy_seqno+0x9/0x70 [ 1212.057011] ? selinux_file_permission+0x92/0x520 [ 1212.057426] ? do_splice_to+0x160/0x160 [ 1212.057773] ? security_file_permission+0xb1/0xe0 [ 1212.058194] do_splice_direct+0x1c4/0x290 [ 1212.058552] ? splice_direct_to_actor+0x980/0x980 [ 1212.058965] ? avc_policy_seqno+0x9/0x70 [ 1212.059332] ? security_file_permission+0xb1/0xe0 [ 1212.059756] do_sendfile+0x553/0x11e0 [ 1212.060095] ? do_pwritev+0x270/0x270 [ 1212.060432] ? wait_for_completion_io+0x270/0x270 [ 1212.060848] ? rcu_read_lock_any_held+0x75/0xa0 [ 1212.061247] ? vfs_write+0x354/0xb10 [ 1212.061575] __x64_sys_sendfile64+0x1d1/0x210 [ 1212.061963] ? __ia32_sys_sendfile+0x220/0x220 [ 1212.062357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1212.062808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1212.063267] do_syscall_64+0x33/0x40 [ 1212.063589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1212.064026] RIP: 0033:0x7f4ad87fcb19 [ 1212.064353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.065908] RSP: 002b:00007f4ad5d51188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1212.066561] RAX: ffffffffffffffda RBX: 00007f4ad8910020 RCX: 00007f4ad87fcb19 [ 1212.067186] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1212.067792] RBP: 00007f4ad5d511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.068398] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1212.069002] R13: 00007ffec1f767cf R14: 00007f4ad5d51300 R15: 0000000000022000 [ 1212.075125] FAULT_INJECTION: forcing a failure. [ 1212.075125] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.076130] CPU: 1 PID: 18489 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1212.076715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.077408] Call Trace: [ 1212.077634] dump_stack+0x107/0x167 [ 1212.077945] should_fail.cold+0x5/0xa [ 1212.078272] ? alloc_pipe_info+0x10a/0x590 [ 1212.078637] should_failslab+0x5/0x20 [ 1212.078963] kmem_cache_alloc_trace+0x55/0x320 [ 1212.079379] alloc_pipe_info+0x10a/0x590 [ 1212.079727] ? SOFTIRQ_verbose+0x10/0x10 [ 1212.080078] splice_direct_to_actor+0x774/0x980 [ 1212.080480] ? _cond_resched+0x12/0x80 [ 1212.080814] ? inode_security+0x107/0x140 [ 1212.081167] ? pipe_to_sendpage+0x380/0x380 [ 1212.081536] ? avc_policy_seqno+0x9/0x70 [ 1212.081884] ? selinux_file_permission+0x92/0x520 [ 1212.082299] ? do_splice_to+0x160/0x160 [ 1212.082640] ? security_file_permission+0xb1/0xe0 [ 1212.083069] do_splice_direct+0x1c4/0x290 [ 1212.083426] ? splice_direct_to_actor+0x980/0x980 [ 1212.083835] ? avc_policy_seqno+0x9/0x70 [ 1212.084191] ? security_file_permission+0xb1/0xe0 [ 1212.084613] do_sendfile+0x553/0x11e0 [ 1212.084947] ? do_pwritev+0x270/0x270 [ 1212.085279] ? wait_for_completion_io+0x270/0x270 [ 1212.085697] ? rcu_read_lock_any_held+0x75/0xa0 [ 1212.086092] ? vfs_write+0x354/0xb10 [ 1212.086419] __x64_sys_sendfile64+0x1d1/0x210 [ 1212.086802] ? __ia32_sys_sendfile+0x220/0x220 [ 1212.087207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1212.087655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1212.088094] do_syscall_64+0x33/0x40 [ 1212.088414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1212.088848] RIP: 0033:0x7fa9c58c0b19 [ 1212.089165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.091074] RSP: 002b:00007fa9c2e15188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1212.091790] RAX: ffffffffffffffda RBX: 00007fa9c59d4020 RCX: 00007fa9c58c0b19 [ 1212.092411] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1212.093015] RBP: 00007fa9c2e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.093632] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1212.094233] R13: 00007fff543b2a4f R14: 00007fa9c2e15300 R15: 0000000000022000 21:22:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1212.123363] FAULT_INJECTION: forcing a failure. [ 1212.123363] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.124619] CPU: 0 PID: 18420 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1212.125206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.125908] Call Trace: [ 1212.126137] dump_stack+0x107/0x167 [ 1212.126455] should_fail.cold+0x5/0xa [ 1212.126787] ? create_object.isra.0+0x3a/0xa20 [ 1212.127197] should_failslab+0x5/0x20 [ 1212.127530] kmem_cache_alloc+0x5b/0x310 [ 1212.127886] create_object.isra.0+0x3a/0xa20 [ 1212.128270] kmemleak_alloc_percpu+0xa0/0x100 [ 1212.128660] pcpu_alloc+0x4e2/0x1240 [ 1212.128999] perf_trace_event_init+0x376/0x9c0 [ 1212.129393] ? memdup_user+0x7c/0xd0 [ 1212.129721] perf_uprobe_init+0x173/0x210 [ 1212.130085] perf_uprobe_event_init+0xff/0x1d0 [ 1212.130482] perf_try_init_event+0x130/0x570 [ 1212.130863] perf_event_alloc.part.0+0xd96/0x2b70 [ 1212.131305] __do_sys_perf_event_open+0x579/0x2e60 [ 1212.131735] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1212.132152] ? perf_event_set_output+0x5b0/0x5b0 [ 1212.132560] ? wait_for_completion_io+0x270/0x270 [ 1212.132993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1212.133443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1212.133892] do_syscall_64+0x33/0x40 [ 1212.134215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1212.134655] RIP: 0033:0x7f235e5b8b19 [ 1212.134976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.136551] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1212.137206] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1212.137815] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1212.138425] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.139044] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1212.139651] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:22:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1212.153563] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1212.187241] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0xf, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1212.291968] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 2) 21:22:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1212.361903] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:03 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:22:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 2) [ 1212.437794] FAULT_INJECTION: forcing a failure. [ 1212.437794] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.439163] CPU: 1 PID: 18748 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1212.439867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.440778] Call Trace: [ 1212.441092] dump_stack+0x107/0x167 [ 1212.441451] should_fail.cold+0x5/0xa [ 1212.441823] ? create_object.isra.0+0x3a/0xa20 [ 1212.442318] should_failslab+0x5/0x20 [ 1212.442696] kmem_cache_alloc+0x5b/0x310 [ 1212.443145] create_object.isra.0+0x3a/0xa20 [ 1212.443580] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1212.444155] kmem_cache_alloc_trace+0x151/0x320 [ 1212.444615] alloc_pipe_info+0x10a/0x590 [ 1212.445059] ? SOFTIRQ_verbose+0x10/0x10 [ 1212.445446] splice_direct_to_actor+0x774/0x980 [ 1212.445887] ? _cond_resched+0x12/0x80 [ 1212.446308] ? inode_security+0x107/0x140 [ 1212.446707] ? pipe_to_sendpage+0x380/0x380 [ 1212.447185] ? avc_policy_seqno+0x9/0x70 [ 1212.447579] ? selinux_file_permission+0x92/0x520 [ 1212.448119] ? do_splice_to+0x160/0x160 [ 1212.448506] ? security_file_permission+0xb1/0xe0 [ 1212.449026] do_splice_direct+0x1c4/0x290 [ 1212.449430] ? splice_direct_to_actor+0x980/0x980 [ 1212.449890] ? avc_policy_seqno+0x9/0x70 [ 1212.450343] ? security_file_permission+0xb1/0xe0 [ 1212.450836] do_sendfile+0x553/0x11e0 [ 1212.451278] ? do_pwritev+0x270/0x270 [ 1212.451645] ? wait_for_completion_io+0x270/0x270 [ 1212.452171] ? rcu_read_lock_any_held+0x75/0xa0 [ 1212.452611] ? vfs_write+0x354/0xb10 [ 1212.453015] __x64_sys_sendfile64+0x1d1/0x210 [ 1212.453467] ? __ia32_sys_sendfile+0x220/0x220 [ 1212.453953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1212.454466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1212.455011] do_syscall_64+0x33/0x40 [ 1212.455377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1212.455858] RIP: 0033:0x7fa9c58c0b19 [ 1212.456254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.457839] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1212.458523] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1212.459170] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1212.459784] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.460502] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1212.461201] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1212.518776] FAULT_INJECTION: forcing a failure. [ 1212.518776] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.519982] CPU: 1 PID: 18752 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1212.520646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.521479] Call Trace: [ 1212.521732] dump_stack+0x107/0x167 [ 1212.522152] should_fail.cold+0x5/0xa [ 1212.522516] ? create_object.isra.0+0x3a/0xa20 [ 1212.523009] should_failslab+0x5/0x20 [ 1212.523387] kmem_cache_alloc+0x5b/0x310 [ 1212.523804] create_object.isra.0+0x3a/0xa20 [ 1212.524279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1212.524774] kmem_cache_alloc_trace+0x151/0x320 [ 1212.525277] alloc_pipe_info+0x10a/0x590 [ 1212.525672] ? SOFTIRQ_verbose+0x10/0x10 [ 1212.526140] splice_direct_to_actor+0x774/0x980 [ 1212.526595] ? _cond_resched+0x12/0x80 [ 1212.527037] ? inode_security+0x107/0x140 [ 1212.527448] ? pipe_to_sendpage+0x380/0x380 [ 1212.527868] ? avc_policy_seqno+0x9/0x70 [ 1212.528314] ? selinux_file_permission+0x92/0x520 [ 1212.528780] ? do_splice_to+0x160/0x160 [ 1212.529213] ? security_file_permission+0xb1/0xe0 [ 1212.529680] do_splice_direct+0x1c4/0x290 [ 1212.530154] ? splice_direct_to_actor+0x980/0x980 [ 1212.530610] ? avc_policy_seqno+0x9/0x70 [ 1212.531058] ? security_file_permission+0xb1/0xe0 [ 1212.531528] do_sendfile+0x553/0x11e0 [ 1212.531905] ? do_pwritev+0x270/0x270 [ 1212.532325] ? wait_for_completion_io+0x270/0x270 [ 1212.532778] ? rcu_read_lock_any_held+0x75/0xa0 [ 1212.533270] ? vfs_write+0x354/0xb10 [ 1212.533635] __x64_sys_sendfile64+0x1d1/0x210 [ 1212.534142] ? __ia32_sys_sendfile+0x220/0x220 [ 1212.534589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1212.535144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1212.535632] do_syscall_64+0x33/0x40 [ 1212.536030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1212.536513] RIP: 0033:0x7f4ad87fcb19 [ 1212.536866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.538712] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1212.539476] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1212.540186] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1212.540856] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.541587] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1212.542340] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 21:22:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:22:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:22:19 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:22:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, 0x0, 0x301) 21:22:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 24) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) [ 1227.964461] FAULT_INJECTION: forcing a failure. [ 1227.964461] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.965463] CPU: 0 PID: 18860 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1227.966049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.966698] Call Trace: 21:22:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x7, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 3) 21:22:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 3) [ 1227.966978] dump_stack+0x107/0x167 [ 1227.967297] should_fail.cold+0x5/0xa [ 1227.967607] ? create_object.isra.0+0x3a/0xa20 [ 1227.968021] should_failslab+0x5/0x20 [ 1227.968326] kmem_cache_alloc+0x5b/0x310 [ 1227.968650] ? mark_held_locks+0x9e/0xe0 [ 1227.969022] create_object.isra.0+0x3a/0xa20 [ 1227.969380] kmemleak_alloc_percpu+0xa0/0x100 [ 1227.969741] pcpu_alloc+0x4e2/0x1240 [ 1227.970100] perf_trace_event_init+0x376/0x9c0 [ 1227.970464] ? memdup_user+0x7c/0xd0 [ 1227.970764] perf_uprobe_init+0x173/0x210 [ 1227.971144] perf_uprobe_event_init+0xff/0x1d0 [ 1227.971524] perf_try_init_event+0x130/0x570 [ 1227.971876] perf_event_alloc.part.0+0xd96/0x2b70 [ 1227.972339] __do_sys_perf_event_open+0x579/0x2e60 [ 1227.972738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1227.973167] ? perf_event_set_output+0x5b0/0x5b0 [ 1227.973541] ? wait_for_completion_io+0x270/0x270 [ 1227.973986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1227.974403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1227.974812] do_syscall_64+0x33/0x40 [ 1227.975152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1227.975584] RIP: 0033:0x7f235e5b8b19 [ 1227.975880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.977423] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1227.978071] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1227.978629] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1227.979241] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.979798] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1227.980401] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1227.991782] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1228.053613] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1228.072145] FAULT_INJECTION: forcing a failure. [ 1228.072145] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.073288] CPU: 0 PID: 18886 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1228.073856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.074561] Call Trace: [ 1228.074783] dump_stack+0x107/0x167 [ 1228.075126] should_fail.cold+0x5/0xa [ 1228.075456] ? alloc_pipe_info+0x1e5/0x590 [ 1228.075801] should_failslab+0x5/0x20 [ 1228.076153] __kmalloc+0x72/0x390 [ 1228.076433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.076841] alloc_pipe_info+0x1e5/0x590 [ 1228.077238] ? SOFTIRQ_verbose+0x10/0x10 [ 1228.077575] splice_direct_to_actor+0x774/0x980 [ 1228.077998] ? _cond_resched+0x12/0x80 [ 1228.078314] ? inode_security+0x107/0x140 [ 1228.078647] ? pipe_to_sendpage+0x380/0x380 [ 1228.079041] ? avc_policy_seqno+0x9/0x70 [ 1228.079384] ? selinux_file_permission+0x92/0x520 [ 1228.079767] ? do_splice_to+0x160/0x160 [ 1228.080136] ? security_file_permission+0xb1/0xe0 [ 1228.080534] do_splice_direct+0x1c4/0x290 [ 1228.080865] ? splice_direct_to_actor+0x980/0x980 [ 1228.081293] ? avc_policy_seqno+0x9/0x70 [ 1228.081634] ? security_file_permission+0xb1/0xe0 [ 1228.082094] do_sendfile+0x553/0x11e0 [ 1228.082408] ? do_pwritev+0x270/0x270 [ 1228.082722] ? wait_for_completion_io+0x270/0x270 [ 1228.083152] ? rcu_read_lock_any_held+0x75/0xa0 [ 1228.083534] ? vfs_write+0x354/0xb10 [ 1228.083840] __x64_sys_sendfile64+0x1d1/0x210 [ 1228.084249] ? __ia32_sys_sendfile+0x220/0x220 [ 1228.084622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.085083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.085505] do_syscall_64+0x33/0x40 [ 1228.085800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.086275] RIP: 0033:0x7f4ad87fcb19 [ 1228.086577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.088112] RSP: 002b:00007f4ad5d51188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1228.088722] RAX: ffffffffffffffda RBX: 00007f4ad8910020 RCX: 00007f4ad87fcb19 [ 1228.089331] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1228.089890] RBP: 00007f4ad5d511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.090514] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1228.091118] R13: 00007ffec1f767cf R14: 00007f4ad5d51300 R15: 0000000000022000 [ 1228.101581] FAULT_INJECTION: forcing a failure. [ 1228.101581] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.102562] CPU: 0 PID: 18920 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1228.103199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.103863] Call Trace: [ 1228.104118] dump_stack+0x107/0x167 [ 1228.104410] should_fail.cold+0x5/0xa [ 1228.104714] ? alloc_pipe_info+0x1e5/0x590 [ 1228.105129] should_failslab+0x5/0x20 [ 1228.105433] __kmalloc+0x72/0x390 [ 1228.105711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.106161] alloc_pipe_info+0x1e5/0x590 [ 1228.106485] ? SOFTIRQ_verbose+0x10/0x10 [ 1228.106811] splice_direct_to_actor+0x774/0x980 [ 1228.107237] ? _cond_resched+0x12/0x80 [ 1228.107555] ? inode_security+0x107/0x140 [ 1228.107881] ? pipe_to_sendpage+0x380/0x380 [ 1228.108291] ? avc_policy_seqno+0x9/0x70 [ 1228.108613] ? selinux_file_permission+0x92/0x520 [ 1228.109041] ? do_splice_to+0x160/0x160 [ 1228.109362] ? security_file_permission+0xb1/0xe0 [ 1228.109748] do_splice_direct+0x1c4/0x290 [ 1228.110131] ? splice_direct_to_actor+0x980/0x980 [ 1228.110511] ? avc_policy_seqno+0x9/0x70 [ 1228.110838] ? security_file_permission+0xb1/0xe0 [ 1228.111283] do_sendfile+0x553/0x11e0 [ 1228.111597] ? do_pwritev+0x270/0x270 [ 1228.111938] ? wait_for_completion_io+0x270/0x270 [ 1228.112334] ? rcu_read_lock_any_held+0x75/0xa0 [ 1228.112704] ? vfs_write+0x354/0xb10 [ 1228.113074] __x64_sys_sendfile64+0x1d1/0x210 [ 1228.113437] ? __ia32_sys_sendfile+0x220/0x220 [ 1228.113802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.114267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.114679] do_syscall_64+0x33/0x40 [ 1228.115018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.115441] RIP: 0033:0x7fa9c58c0b19 [ 1228.115736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.117284] RSP: 002b:00007fa9c2e15188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1228.117884] RAX: ffffffffffffffda RBX: 00007fa9c59d4020 RCX: 00007fa9c58c0b19 [ 1228.118491] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1228.119094] RBP: 00007fa9c2e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.119678] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1228.120284] R13: 00007fff543b2a4f R14: 00007fa9c2e15300 R15: 0000000000022000 21:22:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x4, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1228.181524] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1228.233894] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x6, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:19 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1228.365819] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, 0x0, 0x301) 21:22:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 4) 21:22:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 4) [ 1228.519967] FAULT_INJECTION: forcing a failure. [ 1228.519967] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.520941] CPU: 0 PID: 19095 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1228.521487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.522141] Call Trace: [ 1228.522366] dump_stack+0x107/0x167 [ 1228.522661] should_fail.cold+0x5/0xa [ 1228.522972] ? create_object.isra.0+0x3a/0xa20 [ 1228.523359] should_failslab+0x5/0x20 [ 1228.523666] kmem_cache_alloc+0x5b/0x310 [ 1228.523996] create_object.isra.0+0x3a/0xa20 [ 1228.524348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.524756] __kmalloc+0x16e/0x390 [ 1228.525049] alloc_pipe_info+0x1e5/0x590 [ 1228.525376] ? SOFTIRQ_verbose+0x10/0x10 [ 1228.525705] splice_direct_to_actor+0x774/0x980 [ 1228.526080] ? _cond_resched+0x12/0x80 [ 1228.526394] ? inode_security+0x107/0x140 [ 1228.526724] ? pipe_to_sendpage+0x380/0x380 [ 1228.527069] ? avc_policy_seqno+0x9/0x70 [ 1228.527415] ? selinux_file_permission+0x92/0x520 [ 1228.527801] ? do_splice_to+0x160/0x160 [ 1228.528123] ? security_file_permission+0xb1/0xe0 [ 1228.528513] do_splice_direct+0x1c4/0x290 [ 1228.528858] ? splice_direct_to_actor+0x980/0x980 [ 1228.529243] ? avc_policy_seqno+0x9/0x70 [ 1228.529581] ? security_file_permission+0xb1/0xe0 [ 1228.529973] do_sendfile+0x553/0x11e0 [ 1228.530286] ? do_pwritev+0x270/0x270 [ 1228.530595] ? wait_for_completion_io+0x270/0x270 [ 1228.530982] ? rcu_read_lock_any_held+0x75/0xa0 [ 1228.531446] ? vfs_write+0x354/0xb10 [ 1228.531752] __x64_sys_sendfile64+0x1d1/0x210 [ 1228.532113] ? __ia32_sys_sendfile+0x220/0x220 [ 1228.532482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.532900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.533314] do_syscall_64+0x33/0x40 [ 1228.533614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.534021] RIP: 0033:0x7fa9c58c0b19 [ 1228.534330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.535808] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1228.536409] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1228.536965] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1228.537523] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.538081] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1228.538642] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1228.580621] FAULT_INJECTION: forcing a failure. [ 1228.580621] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.581572] CPU: 0 PID: 19099 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1228.582140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.582818] Call Trace: [ 1228.583031] dump_stack+0x107/0x167 [ 1228.583345] should_fail.cold+0x5/0xa [ 1228.583652] ? create_object.isra.0+0x3a/0xa20 [ 1228.584020] should_failslab+0x5/0x20 [ 1228.584327] kmem_cache_alloc+0x5b/0x310 [ 1228.584652] ? create_object.isra.0+0x3ad/0xa20 [ 1228.585040] create_object.isra.0+0x3a/0xa20 [ 1228.585404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1228.585814] __kmalloc_node+0x1ae/0x420 [ 1228.586140] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1228.586550] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1228.586949] ? trace_hardirqs_on+0x5b/0x180 [ 1228.587318] kmem_cache_alloc_trace+0x169/0x320 [ 1228.587697] alloc_pipe_info+0x10a/0x590 [ 1228.588022] ? SOFTIRQ_verbose+0x10/0x10 [ 1228.588357] splice_direct_to_actor+0x774/0x980 [ 1228.588737] ? _cond_resched+0x12/0x80 [ 1228.589050] ? inode_security+0x107/0x140 [ 1228.589387] ? pipe_to_sendpage+0x380/0x380 [ 1228.589735] ? avc_policy_seqno+0x9/0x70 [ 1228.590059] ? selinux_file_permission+0x92/0x520 [ 1228.590445] ? do_splice_to+0x160/0x160 [ 1228.590766] ? security_file_permission+0xb1/0xe0 [ 1228.591159] do_splice_direct+0x1c4/0x290 [ 1228.591505] ? splice_direct_to_actor+0x980/0x980 [ 1228.591889] ? avc_policy_seqno+0x9/0x70 [ 1228.592226] ? security_file_permission+0xb1/0xe0 [ 1228.592631] do_sendfile+0x553/0x11e0 [ 1228.592950] ? do_pwritev+0x270/0x270 [ 1228.593259] ? wait_for_completion_io+0x270/0x270 [ 1228.593646] ? rcu_read_lock_any_held+0x75/0xa0 [ 1228.594016] ? vfs_write+0x354/0xb10 [ 1228.594324] __x64_sys_sendfile64+0x1d1/0x210 [ 1228.594685] ? __ia32_sys_sendfile+0x220/0x220 [ 1228.595054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1228.595492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.595907] do_syscall_64+0x33/0x40 [ 1228.596206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1228.596615] RIP: 0033:0x7f4ad87fcb19 [ 1228.596915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.598366] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1228.598974] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1228.599562] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1228.600128] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.600695] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1228.601262] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 21:22:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 5) 21:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x11, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:22:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:22:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:22:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 25) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:22:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:22:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 5) [ 1243.213453] FAULT_INJECTION: forcing a failure. [ 1243.213453] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.215867] CPU: 1 PID: 19115 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1243.217127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.218609] Call Trace: [ 1243.219069] dump_stack+0x107/0x167 [ 1243.219584] should_fail.cold+0x5/0xa [ 1243.219928] ? alloc_pipe_info+0x1e5/0x590 [ 1243.220289] should_failslab+0x5/0x20 [ 1243.220613] __kmalloc+0x72/0x390 [ 1243.220916] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.221350] alloc_pipe_info+0x1e5/0x590 [ 1243.221697] ? SOFTIRQ_verbose+0x10/0x10 [ 1243.222046] splice_direct_to_actor+0x774/0x980 [ 1243.222444] ? _cond_resched+0x12/0x80 [ 1243.222777] ? inode_security+0x107/0x140 [ 1243.223127] ? pipe_to_sendpage+0x380/0x380 [ 1243.223529] ? avc_policy_seqno+0x9/0x70 [ 1243.223889] ? selinux_file_permission+0x92/0x520 [ 1243.224302] ? do_splice_to+0x160/0x160 [ 1243.224645] ? security_file_permission+0xb1/0xe0 [ 1243.225058] do_splice_direct+0x1c4/0x290 [ 1243.225411] ? splice_direct_to_actor+0x980/0x980 [ 1243.225817] ? avc_policy_seqno+0x9/0x70 [ 1243.226170] ? security_file_permission+0xb1/0xe0 [ 1243.226588] do_sendfile+0x553/0x11e0 [ 1243.226922] ? do_pwritev+0x270/0x270 [ 1243.227250] ? wait_for_completion_io+0x270/0x270 [ 1243.227680] ? rcu_read_lock_any_held+0x75/0xa0 [ 1243.228073] ? vfs_write+0x354/0xb10 [ 1243.228396] __x64_sys_sendfile64+0x1d1/0x210 [ 1243.228779] ? __ia32_sys_sendfile+0x220/0x220 [ 1243.229171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.229616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.230059] do_syscall_64+0x33/0x40 [ 1243.230377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.230810] RIP: 0033:0x7f4ad87fcb19 [ 1243.231127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.232683] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1243.233326] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1243.233928] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1243.234530] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.235130] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1243.235746] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 [ 1243.238762] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1243.283963] FAULT_INJECTION: forcing a failure. [ 1243.283963] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.285240] CPU: 0 PID: 19119 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1243.285787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.286489] Call Trace: [ 1243.286706] dump_stack+0x107/0x167 [ 1243.286999] should_fail.cold+0x5/0xa [ 1243.287356] ? kvmalloc_node+0x119/0x170 [ 1243.287716] should_failslab+0x5/0x20 [ 1243.288023] __kmalloc_node+0x76/0x420 [ 1243.288409] kvmalloc_node+0x119/0x170 [ 1243.288722] seq_read_iter+0x81c/0x12b0 [ 1243.289077] ? perf_trace_lock+0xac/0x490 [ 1243.289432] proc_reg_read_iter+0x20a/0x2e0 [ 1243.289776] generic_file_splice_read+0x455/0x6d0 [ 1243.290209] ? pipe_to_user+0x170/0x170 [ 1243.290535] ? fsnotify_perm.part.0+0x22d/0x620 [ 1243.290908] ? security_file_permission+0xb1/0xe0 [ 1243.291337] ? pipe_to_user+0x170/0x170 [ 1243.291689] do_splice_to+0x10e/0x160 [ 1243.292006] splice_direct_to_actor+0x2fe/0x980 [ 1243.292461] ? pipe_to_sendpage+0x380/0x380 [ 1243.292815] ? do_splice_to+0x160/0x160 [ 1243.293195] ? security_file_permission+0xb1/0xe0 [ 1243.293590] do_splice_direct+0x1c4/0x290 [ 1243.294172] ? splice_direct_to_actor+0x980/0x980 [ 1243.294562] ? avc_policy_seqno+0x9/0x70 [ 1243.294908] ? security_file_permission+0xb1/0xe0 [ 1243.295368] do_sendfile+0x553/0x11e0 [ 1243.295727] ? do_pwritev+0x270/0x270 [ 1243.296127] ? wait_for_completion_io+0x270/0x270 [ 1243.296513] ? rcu_read_lock_any_held+0x75/0xa0 [ 1243.296880] ? vfs_write+0x354/0xb10 [ 1243.297228] __x64_sys_sendfile64+0x1d1/0x210 [ 1243.297586] ? __ia32_sys_sendfile+0x220/0x220 [ 1243.297951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.298415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.298826] do_syscall_64+0x33/0x40 [ 1243.299205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.299651] RIP: 0033:0x7fa9c58c0b19 [ 1243.299963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.301825] RSP: 002b:00007fa9c2e15188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1243.302474] RAX: ffffffffffffffda RBX: 00007fa9c59d4020 RCX: 00007fa9c58c0b19 [ 1243.303074] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1243.303675] RBP: 00007fa9c2e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.304303] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1243.304862] R13: 00007fff543b2a4f R14: 00007fa9c2e15300 R15: 0000000000022000 21:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x29, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1243.385700] FAULT_INJECTION: forcing a failure. [ 1243.385700] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.387559] CPU: 0 PID: 19107 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1243.388262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.388912] Call Trace: [ 1243.389298] dump_stack+0x107/0x167 [ 1243.389592] should_fail.cold+0x5/0xa [ 1243.389959] ? __uprobe_register+0x19c/0x880 [ 1243.390749] should_failslab+0x5/0x20 [ 1243.391106] kmem_cache_alloc_trace+0x55/0x320 [ 1243.391507] __uprobe_register+0x19c/0x880 [ 1243.391855] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1243.392321] probe_event_enable+0x368/0xa20 [ 1243.392667] ? uprobe_perf_close+0x5f0/0x5f0 [ 1243.393022] trace_uprobe_register+0x54/0x730 [ 1243.393454] perf_trace_event_init+0x554/0x9c0 [ 1243.393823] perf_uprobe_init+0x173/0x210 [ 1243.394207] perf_uprobe_event_init+0xff/0x1d0 [ 1243.394571] perf_try_init_event+0x130/0x570 [ 1243.394921] perf_event_alloc.part.0+0xd96/0x2b70 [ 1243.395363] __do_sys_perf_event_open+0x579/0x2e60 [ 1243.395798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1243.396241] ? perf_event_set_output+0x5b0/0x5b0 [ 1243.396621] ? wait_for_completion_io+0x270/0x270 [ 1243.397098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.397535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.397952] do_syscall_64+0x33/0x40 [ 1243.398302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.398710] RIP: 0033:0x7f235e5b8b19 [ 1243.399015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.400613] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1243.401298] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1243.401936] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1243.402599] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.403361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1243.403928] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1243.410974] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1243.431194] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:22:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 26) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x2b, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 6) 21:22:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 6) 21:22:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1243.512432] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1243.515597] FAULT_INJECTION: forcing a failure. [ 1243.515597] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.516612] CPU: 1 PID: 19235 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1243.517206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.517903] Call Trace: [ 1243.518136] dump_stack+0x107/0x167 [ 1243.518450] should_fail.cold+0x5/0xa [ 1243.518781] ? __uprobe_register+0x19c/0x880 [ 1243.519160] should_failslab+0x5/0x20 [ 1243.519499] kmem_cache_alloc_trace+0x55/0x320 [ 1243.519896] __uprobe_register+0x19c/0x880 [ 1243.520260] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1243.520711] probe_event_enable+0x368/0xa20 [ 1243.521081] ? uprobe_perf_close+0x5f0/0x5f0 [ 1243.521464] trace_uprobe_register+0x54/0x730 [ 1243.521854] perf_trace_event_init+0x554/0x9c0 [ 1243.522250] perf_uprobe_init+0x173/0x210 [ 1243.522610] perf_uprobe_event_init+0xff/0x1d0 [ 1243.523001] perf_try_init_event+0x130/0x570 [ 1243.523377] perf_event_alloc.part.0+0xd96/0x2b70 [ 1243.523824] __do_sys_perf_event_open+0x579/0x2e60 [ 1243.524252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1243.524667] ? perf_event_set_output+0x5b0/0x5b0 [ 1243.525069] ? wait_for_completion_io+0x270/0x270 [ 1243.525502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.525945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.526385] do_syscall_64+0x33/0x40 [ 1243.526705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.527137] RIP: 0033:0x7f235e5b8b19 [ 1243.527465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.529000] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1243.529641] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1243.530237] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1243.530833] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.531440] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1243.532052] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1243.570294] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1243.618256] FAULT_INJECTION: forcing a failure. [ 1243.618256] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.619483] CPU: 1 PID: 19249 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1243.620175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.620989] Call Trace: [ 1243.621257] dump_stack+0x107/0x167 [ 1243.621593] should_fail.cold+0x5/0xa [ 1243.622002] ? create_object.isra.0+0x3a/0xa20 [ 1243.622436] should_failslab+0x5/0x20 [ 1243.622786] kmem_cache_alloc+0x5b/0x310 [ 1243.623230] create_object.isra.0+0x3a/0xa20 [ 1243.623240] FAULT_INJECTION: forcing a failure. [ 1243.623240] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.623631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.623650] __kmalloc_node+0x1ae/0x420 [ 1243.625371] kvmalloc_node+0x119/0x170 [ 1243.625703] seq_read_iter+0x81c/0x12b0 [ 1243.626137] ? perf_trace_lock+0xac/0x490 [ 1243.626510] proc_reg_read_iter+0x20a/0x2e0 [ 1243.626876] generic_file_splice_read+0x455/0x6d0 [ 1243.627344] ? pipe_to_user+0x170/0x170 [ 1243.627706] ? fsnotify_perm.part.0+0x22d/0x620 [ 1243.628165] ? security_file_permission+0xb1/0xe0 [ 1243.628574] ? pipe_to_user+0x170/0x170 [ 1243.628951] do_splice_to+0x10e/0x160 [ 1243.629305] splice_direct_to_actor+0x2fe/0x980 [ 1243.629702] ? pipe_to_sendpage+0x380/0x380 [ 1243.630165] ? do_splice_to+0x160/0x160 [ 1243.630508] ? security_file_permission+0xb1/0xe0 [ 1243.630962] do_splice_direct+0x1c4/0x290 [ 1243.631340] ? splice_direct_to_actor+0x980/0x980 [ 1243.631772] ? avc_policy_seqno+0x9/0x70 [ 1243.632183] ? security_file_permission+0xb1/0xe0 [ 1243.632598] do_sendfile+0x553/0x11e0 [ 1243.632980] ? do_pwritev+0x270/0x270 [ 1243.633331] ? wait_for_completion_io+0x270/0x270 [ 1243.633738] ? rcu_read_lock_any_held+0x75/0xa0 [ 1243.634218] ? vfs_write+0x354/0xb10 [ 1243.634540] __x64_sys_sendfile64+0x1d1/0x210 [ 1243.634964] ? __ia32_sys_sendfile+0x220/0x220 [ 1243.635378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.635835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.636333] do_syscall_64+0x33/0x40 [ 1243.636647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.637138] RIP: 0033:0x7fa9c58c0b19 [ 1243.637457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.639115] RSP: 002b:00007fa9c2e15188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1243.639774] RAX: ffffffffffffffda RBX: 00007fa9c59d4020 RCX: 00007fa9c58c0b19 [ 1243.640426] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1243.641076] RBP: 00007fa9c2e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.641677] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1243.642330] R13: 00007fff543b2a4f R14: 00007fa9c2e15300 R15: 0000000000022000 [ 1243.642993] CPU: 0 PID: 19250 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1243.643638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.644511] Call Trace: [ 1243.644527] dump_stack+0x107/0x167 [ 1243.644544] should_fail.cold+0x5/0xa [ 1243.644559] ? create_object.isra.0+0x3a/0xa20 [ 1243.644576] should_failslab+0x5/0x20 [ 1243.644589] kmem_cache_alloc+0x5b/0x310 [ 1243.644610] create_object.isra.0+0x3a/0xa20 [ 1243.644624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 21:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x2c, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1243.644645] __kmalloc_node+0x1ae/0x420 [ 1243.644669] kvmalloc_node+0x119/0x170 [ 1243.644685] seq_read_iter+0x81c/0x12b0 [ 1243.644697] ? perf_trace_lock+0xac/0x490 [ 1243.644731] proc_reg_read_iter+0x20a/0x2e0 [ 1243.644749] generic_file_splice_read+0x455/0x6d0 [ 1243.644765] ? pipe_to_user+0x170/0x170 [ 1243.644790] ? fsnotify_perm.part.0+0x22d/0x620 [ 1243.644811] ? security_file_permission+0xb1/0xe0 [ 1243.644829] ? pipe_to_user+0x170/0x170 [ 1243.644844] do_splice_to+0x10e/0x160 [ 1243.644862] splice_direct_to_actor+0x2fe/0x980 [ 1243.644882] ? pipe_to_sendpage+0x380/0x380 [ 1243.644901] ? do_splice_to+0x160/0x160 [ 1243.644920] ? security_file_permission+0xb1/0xe0 [ 1243.644947] do_splice_direct+0x1c4/0x290 [ 1243.644965] ? splice_direct_to_actor+0x980/0x980 [ 1243.644977] ? avc_policy_seqno+0x9/0x70 [ 1243.645000] ? security_file_permission+0xb1/0xe0 [ 1243.645023] do_sendfile+0x553/0x11e0 [ 1243.645094] ? do_pwritev+0x270/0x270 [ 1243.645113] ? wait_for_completion_io+0x270/0x270 [ 1243.645128] ? rcu_read_lock_any_held+0x75/0xa0 [ 1243.645140] ? vfs_write+0x354/0xb10 [ 1243.645161] __x64_sys_sendfile64+0x1d1/0x210 [ 1243.645178] ? __ia32_sys_sendfile+0x220/0x220 [ 1243.645198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.645212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.645230] do_syscall_64+0x33/0x40 [ 1243.645243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1243.645252] RIP: 0033:0x7f4ad87fcb19 [ 1243.645263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.645271] RSP: 002b:00007f4ad5d51188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 21:22:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10b000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:22:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x2f, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1243.645286] RAX: ffffffffffffffda RBX: 00007f4ad8910020 RCX: 00007f4ad87fcb19 [ 1243.645294] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1243.645302] RBP: 00007f4ad5d511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.645313] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1243.645323] R13: 00007ffec1f767cf R14: 00007f4ad5d51300 R15: 0000000000022000 [ 1243.719239] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1243.944233] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1243.999850] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 27) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:22:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x0, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:22:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3c, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 7) 21:22:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:22:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 7) [ 1259.703294] FAULT_INJECTION: forcing a failure. [ 1259.703294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1259.704461] CPU: 0 PID: 19374 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1259.705063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.705790] Call Trace: [ 1259.706022] dump_stack+0x107/0x167 [ 1259.706333] should_fail.cold+0x5/0xa [ 1259.706667] __alloc_pages_nodemask+0x182/0x600 [ 1259.707065] ? __lock_acquire+0xbb1/0x5b00 [ 1259.707425] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1259.707983] ? perf_trace_lock+0xac/0x490 [ 1259.708372] alloc_pages_current+0x187/0x280 [ 1259.708774] ? __lockdep_reset_lock+0x180/0x180 [ 1259.709207] push_pipe+0x2b5/0x6d0 [ 1259.709553] _copy_to_iter+0x509/0x12d0 [ 1259.709924] ? __virt_addr_valid+0x346/0x5d0 [ 1259.710336] ? lock_downgrade+0x6d0/0x6d0 [ 1259.710731] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1259.711178] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1259.711642] ? __check_object_size+0x319/0x440 [ 1259.712085] seq_read_iter+0xdcb/0x12b0 [ 1259.712480] proc_reg_read_iter+0x20a/0x2e0 [ 1259.712890] generic_file_splice_read+0x455/0x6d0 [ 1259.713341] ? pipe_to_user+0x170/0x170 [ 1259.713720] ? fsnotify_perm.part.0+0x22d/0x620 [ 1259.714156] ? security_file_permission+0xb1/0xe0 [ 1259.714606] ? pipe_to_user+0x170/0x170 [ 1259.714987] do_splice_to+0x10e/0x160 [ 1259.715351] splice_direct_to_actor+0x2fe/0x980 [ 1259.715790] ? pipe_to_sendpage+0x380/0x380 [ 1259.716220] ? do_splice_to+0x160/0x160 [ 1259.716597] ? security_file_permission+0xb1/0xe0 [ 1259.717051] do_splice_direct+0x1c4/0x290 [ 1259.717439] ? splice_direct_to_actor+0x980/0x980 [ 1259.717891] ? avc_policy_seqno+0x9/0x70 [ 1259.718272] ? security_file_permission+0xb1/0xe0 [ 1259.718717] do_sendfile+0x553/0x11e0 [ 1259.719052] ? do_pwritev+0x270/0x270 [ 1259.719376] ? wait_for_completion_io+0x270/0x270 [ 1259.719787] ? rcu_read_lock_any_held+0x75/0xa0 [ 1259.720194] ? vfs_write+0x354/0xb10 [ 1259.720517] __x64_sys_sendfile64+0x1d1/0x210 [ 1259.720896] ? __ia32_sys_sendfile+0x220/0x220 [ 1259.721283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.721725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.722160] do_syscall_64+0x33/0x40 [ 1259.722475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.722904] RIP: 0033:0x7fa9c58c0b19 21:22:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x2b, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1259.723221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.727995] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1259.728780] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1259.728797] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1259.728805] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1259.728814] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.728822] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1259.728831] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1259.733374] FAULT_INJECTION: forcing a failure. [ 1259.733374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1259.741784] CPU: 0 PID: 19370 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1259.742418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.743157] Call Trace: [ 1259.743387] dump_stack+0x107/0x167 [ 1259.743694] should_fail.cold+0x5/0xa [ 1259.744032] __alloc_pages_nodemask+0x182/0x600 [ 1259.744421] ? __lock_acquire+0xbb1/0x5b00 [ 1259.744776] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1259.745283] ? perf_trace_lock+0xac/0x490 [ 1259.745635] alloc_pages_current+0x187/0x280 [ 1259.746002] ? __lockdep_reset_lock+0x180/0x180 [ 1259.746397] push_pipe+0x2b5/0x6d0 [ 1259.746703] _copy_to_iter+0x509/0x12d0 [ 1259.747037] ? __virt_addr_valid+0x346/0x5d0 [ 1259.747405] ? lock_downgrade+0x6d0/0x6d0 [ 1259.747757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1259.748212] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1259.748669] ? __check_object_size+0x319/0x440 [ 1259.749105] seq_read_iter+0xdcb/0x12b0 [ 1259.749496] proc_reg_read_iter+0x20a/0x2e0 [ 1259.749899] generic_file_splice_read+0x455/0x6d0 [ 1259.750345] ? pipe_to_user+0x170/0x170 [ 1259.750707] ? fsnotify_perm.part.0+0x22d/0x620 [ 1259.751104] ? security_file_permission+0xb1/0xe0 [ 1259.751508] ? pipe_to_user+0x170/0x170 [ 1259.751891] do_splice_to+0x10e/0x160 [ 1259.752221] splice_direct_to_actor+0x2fe/0x980 [ 1259.752618] ? pipe_to_sendpage+0x380/0x380 [ 1259.753013] ? do_splice_to+0x160/0x160 [ 1259.753366] ? security_file_permission+0xb1/0xe0 [ 1259.753812] do_splice_direct+0x1c4/0x290 [ 1259.754182] ? splice_direct_to_actor+0x980/0x980 [ 1259.754604] ? avc_policy_seqno+0x9/0x70 [ 1259.754969] ? security_file_permission+0xb1/0xe0 [ 1259.755396] do_sendfile+0x553/0x11e0 [ 1259.755728] ? do_pwritev+0x270/0x270 [ 1259.756094] ? wait_for_completion_io+0x270/0x270 [ 1259.756540] ? rcu_read_lock_any_held+0x75/0xa0 [ 1259.756964] ? vfs_write+0x354/0xb10 [ 1259.757319] __x64_sys_sendfile64+0x1d1/0x210 [ 1259.757736] ? __ia32_sys_sendfile+0x220/0x220 [ 1259.758159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.758626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.759101] do_syscall_64+0x33/0x40 [ 1259.759433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.759901] RIP: 0033:0x7f4ad87fcb19 [ 1259.760215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.761806] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1259.762452] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1259.763046] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1259.763639] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.764297] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1259.764943] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 [ 1259.766360] FAULT_INJECTION: forcing a failure. [ 1259.766360] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.767774] CPU: 0 PID: 19366 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1259.768377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.769088] Call Trace: [ 1259.769326] dump_stack+0x107/0x167 [ 1259.769637] should_fail.cold+0x5/0xa [ 1259.769967] ? register_for_each_vma+0x476/0xc00 [ 1259.770374] should_failslab+0x5/0x20 [ 1259.770699] kmem_cache_alloc_trace+0x55/0x320 [ 1259.771095] register_for_each_vma+0x476/0xc00 [ 1259.771502] __uprobe_register+0x4df/0x880 [ 1259.771912] probe_event_enable+0x368/0xa20 [ 1259.772325] ? uprobe_perf_close+0x5f0/0x5f0 [ 1259.772746] trace_uprobe_register+0x54/0x730 [ 1259.773186] perf_trace_event_init+0x554/0x9c0 [ 1259.773624] perf_uprobe_init+0x173/0x210 [ 1259.774021] perf_uprobe_event_init+0xff/0x1d0 [ 1259.774486] perf_try_init_event+0x130/0x570 [ 1259.774925] perf_event_alloc.part.0+0xd96/0x2b70 [ 1259.775418] __do_sys_perf_event_open+0x579/0x2e60 [ 1259.775918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1259.776369] ? perf_event_set_output+0x5b0/0x5b0 [ 1259.776812] ? wait_for_completion_io+0x270/0x270 [ 1259.777285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1259.777768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1259.778255] do_syscall_64+0x33/0x40 [ 1259.778607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1259.779082] RIP: 0033:0x7f235e5b8b19 [ 1259.779432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.781034] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1259.781679] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1259.782341] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1259.782974] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.783612] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1259.784274] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1259.909519] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1259.944772] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1259.958387] cgroup: fork rejected by pids controller in /syz5 21:22:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x29, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:22:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1260.098438] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:22:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x2, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1260.255484] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1260.312835] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x11, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x0, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:23:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:23:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 28) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:23:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 8) 21:23:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 8) 21:23:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) 21:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x3, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1276.003148] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1276.040835] FAULT_INJECTION: forcing a failure. [ 1276.040835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1276.042070] CPU: 1 PID: 19614 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1276.042764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1276.043583] Call Trace: [ 1276.043858] dump_stack+0x107/0x167 [ 1276.044211] should_fail.cold+0x5/0xa [ 1276.044551] __alloc_pages_nodemask+0x182/0x600 [ 1276.044954] ? __lock_acquire+0xbb1/0x5b00 [ 1276.045320] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1276.045850] ? perf_trace_lock+0xac/0x490 [ 1276.046210] alloc_pages_current+0x187/0x280 [ 1276.046602] ? __lockdep_reset_lock+0x180/0x180 [ 1276.047004] push_pipe+0x2b5/0x6d0 [ 1276.047317] _copy_to_iter+0x509/0x12d0 [ 1276.047659] ? __virt_addr_valid+0x346/0x5d0 [ 1276.048036] ? lock_downgrade+0x6d0/0x6d0 [ 1276.048414] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1276.048829] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1276.049255] ? __check_object_size+0x319/0x440 [ 1276.049651] seq_read_iter+0xdcb/0x12b0 [ 1276.050009] proc_reg_read_iter+0x20a/0x2e0 [ 1276.050383] generic_file_splice_read+0x455/0x6d0 [ 1276.050796] ? pipe_to_user+0x170/0x170 [ 1276.051146] ? fsnotify_perm.part.0+0x22d/0x620 [ 1276.051556] ? security_file_permission+0xb1/0xe0 [ 1276.051988] ? pipe_to_user+0x170/0x170 [ 1276.052358] do_splice_to+0x10e/0x160 [ 1276.052700] splice_direct_to_actor+0x2fe/0x980 [ 1276.053116] ? pipe_to_sendpage+0x380/0x380 [ 1276.053436] FAULT_INJECTION: forcing a failure. [ 1276.053436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1276.053513] ? do_splice_to+0x160/0x160 [ 1276.055057] ? security_file_permission+0xb1/0xe0 [ 1276.055492] do_splice_direct+0x1c4/0x290 [ 1276.055847] ? splice_direct_to_actor+0x980/0x980 [ 1276.056277] ? avc_policy_seqno+0x9/0x70 [ 1276.056644] ? security_file_permission+0xb1/0xe0 [ 1276.057064] do_sendfile+0x553/0x11e0 [ 1276.057418] ? do_pwritev+0x270/0x270 [ 1276.057748] ? wait_for_completion_io+0x270/0x270 [ 1276.058163] ? rcu_read_lock_any_held+0x75/0xa0 [ 1276.058558] ? vfs_write+0x354/0xb10 [ 1276.058885] __x64_sys_sendfile64+0x1d1/0x210 [ 1276.059270] ? __ia32_sys_sendfile+0x220/0x220 [ 1276.059666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1276.060130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1276.060607] do_syscall_64+0x33/0x40 [ 1276.060926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1276.061381] RIP: 0033:0x7f4ad87fcb19 [ 1276.061703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.063282] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1276.063939] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1276.064573] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1276.065179] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.065799] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1276.066422] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 [ 1276.067128] CPU: 0 PID: 19615 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1276.067732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1276.068587] Call Trace: [ 1276.068823] dump_stack+0x107/0x167 [ 1276.069217] should_fail.cold+0x5/0xa [ 1276.069551] __alloc_pages_nodemask+0x182/0x600 [ 1276.069950] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1276.070549] alloc_pages_current+0x187/0x280 [ 1276.070924] allocate_slab+0x26f/0x380 [ 1276.071371] ___slab_alloc+0x470/0x700 [ 1276.071706] ? create_object.isra.0+0x3a/0xa20 [ 1276.072208] ? fs_reclaim_acquire+0xa5/0x100 [ 1276.072597] ? create_object.isra.0+0x3a/0xa20 [ 1276.072996] ? kmem_cache_alloc+0x301/0x310 [ 1276.073447] kmem_cache_alloc+0x301/0x310 [ 1276.073803] create_object.isra.0+0x3a/0xa20 [ 1276.075908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1276.076450] kmem_cache_alloc_trace+0x151/0x320 [ 1276.076853] __uprobe_register+0x19c/0x880 [ 1276.077267] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1276.077715] probe_event_enable+0x368/0xa20 [ 1276.078132] ? uprobe_perf_close+0x5f0/0x5f0 [ 1276.078515] trace_uprobe_register+0x54/0x730 [ 1276.078902] perf_trace_event_init+0x554/0x9c0 [ 1276.079350] perf_uprobe_init+0x173/0x210 [ 1276.079706] perf_uprobe_event_init+0xff/0x1d0 [ 1276.080167] perf_try_init_event+0x130/0x570 [ 1276.080568] perf_event_alloc.part.0+0xd96/0x2b70 [ 1276.080984] __do_sys_perf_event_open+0x579/0x2e60 [ 1276.081456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1276.081864] ? perf_event_set_output+0x5b0/0x5b0 [ 1276.082310] ? wait_for_completion_io+0x270/0x270 [ 1276.082739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1276.083232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1276.083670] do_syscall_64+0x33/0x40 [ 1276.083985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1276.084511] RIP: 0033:0x7f235e5b8b19 [ 1276.084830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.086475] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1276.087171] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1276.087767] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1276.088433] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.089097] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1276.089695] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 21:23:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) [ 1276.095999] FAULT_INJECTION: forcing a failure. [ 1276.095999] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.097237] CPU: 0 PID: 19612 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1276.097852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1276.098749] Call Trace: [ 1276.098981] dump_stack+0x107/0x167 [ 1276.099341] should_fail.cold+0x5/0xa [ 1276.099670] ? iter_file_splice_write+0x16d/0xc30 [ 1276.100134] should_failslab+0x5/0x20 [ 1276.100487] __kmalloc+0x72/0x390 [ 1276.100787] iter_file_splice_write+0x16d/0xc30 [ 1276.101252] ? atime_needs_update+0x600/0x600 [ 1276.101648] ? generic_splice_sendpage+0x140/0x140 [ 1276.102116] ? pipe_to_user+0x170/0x170 [ 1276.102475] ? security_file_permission+0xb1/0xe0 [ 1276.102888] ? generic_splice_sendpage+0x140/0x140 [ 1276.103364] direct_splice_actor+0x10f/0x170 [ 1276.103740] splice_direct_to_actor+0x387/0x980 [ 1276.104204] ? pipe_to_sendpage+0x380/0x380 [ 1276.104590] ? do_splice_to+0x160/0x160 [ 1276.104930] ? security_file_permission+0xb1/0xe0 [ 1276.105428] do_splice_direct+0x1c4/0x290 [ 1276.105779] ? splice_direct_to_actor+0x980/0x980 [ 1276.106236] ? avc_policy_seqno+0x9/0x70 [ 1276.106590] ? security_file_permission+0xb1/0xe0 [ 1276.107010] do_sendfile+0x553/0x11e0 [ 1276.107397] ? do_pwritev+0x270/0x270 [ 1276.107722] ? wait_for_completion_io+0x270/0x270 [ 1276.108197] ? rcu_read_lock_any_held+0x75/0xa0 [ 1276.108601] ? vfs_write+0x354/0xb10 [ 1276.108925] __x64_sys_sendfile64+0x1d1/0x210 [ 1276.109380] ? __ia32_sys_sendfile+0x220/0x220 [ 1276.109777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1276.110270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1276.110713] do_syscall_64+0x33/0x40 [ 1276.111092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1276.111534] RIP: 0033:0x7fa9c58c0b19 [ 1276.111849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.113530] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1276.114225] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1276.114829] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1276.115480] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.116134] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1276.116142] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1276.120972] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x5, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x3, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1276.319318] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) faccessat(r1, 0x0, 0x301) [ 1276.357647] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x0, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x60, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1276.437559] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1276.486489] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 9) 21:23:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1276.613152] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1276.643522] FAULT_INJECTION: forcing a failure. [ 1276.643522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1276.645464] CPU: 0 PID: 19845 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1276.646136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1276.646843] Call Trace: [ 1276.647367] dump_stack+0x107/0x167 [ 1276.648012] should_fail.cold+0x5/0xa [ 1276.648674] __alloc_pages_nodemask+0x182/0x600 [ 1276.649255] ? __lock_acquire+0xbb1/0x5b00 [ 1276.649627] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1276.650232] ? perf_trace_lock+0xac/0x490 [ 1276.650594] alloc_pages_current+0x187/0x280 [ 1276.651097] ? __lockdep_reset_lock+0x180/0x180 [ 1276.651892] push_pipe+0x2b5/0x6d0 [ 1276.652694] _copy_to_iter+0x509/0x12d0 [ 1276.653501] ? __virt_addr_valid+0x346/0x5d0 [ 1276.654354] ? lock_downgrade+0x6d0/0x6d0 [ 1276.655097] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1276.655935] ? _copy_from_iter_nocache+0xd60/0xd60 [ 1276.657006] ? __check_object_size+0x319/0x440 [ 1276.657783] seq_read_iter+0xdcb/0x12b0 [ 1276.658472] proc_reg_read_iter+0x20a/0x2e0 [ 1276.659207] generic_file_splice_read+0x455/0x6d0 [ 1276.660028] ? pipe_to_user+0x170/0x170 [ 1276.660545] ? fsnotify_perm.part.0+0x22d/0x620 [ 1276.661588] ? security_file_permission+0xb1/0xe0 [ 1276.662643] ? pipe_to_user+0x170/0x170 [ 1276.663509] do_splice_to+0x10e/0x160 [ 1276.664355] splice_direct_to_actor+0x2fe/0x980 [ 1276.665369] ? pipe_to_sendpage+0x380/0x380 [ 1276.666305] ? do_splice_to+0x160/0x160 [ 1276.667166] ? security_file_permission+0xb1/0xe0 [ 1276.668225] do_splice_direct+0x1c4/0x290 [ 1276.669129] ? splice_direct_to_actor+0x980/0x980 [ 1276.670178] ? avc_policy_seqno+0x9/0x70 [ 1276.671050] ? security_file_permission+0xb1/0xe0 [ 1276.671869] do_sendfile+0x553/0x11e0 [ 1276.672537] ? do_pwritev+0x270/0x270 [ 1276.673180] ? wait_for_completion_io+0x270/0x270 [ 1276.674024] ? rcu_read_lock_any_held+0x75/0xa0 [ 1276.674802] ? vfs_write+0x354/0xb10 [ 1276.675433] __x64_sys_sendfile64+0x1d1/0x210 [ 1276.676188] ? __ia32_sys_sendfile+0x220/0x220 [ 1276.677220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1276.678363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1276.679487] do_syscall_64+0x33/0x40 [ 1276.680311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1276.681427] RIP: 0033:0x7f4ad87fcb19 [ 1276.682231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.686270] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1276.687920] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1276.689482] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1276.691039] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.692580] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1276.693784] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 21:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x64, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 10) 21:23:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1292.876211] FAULT_INJECTION: forcing a failure. [ 1292.876211] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.877238] CPU: 0 PID: 19958 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1292.877816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.878508] Call Trace: [ 1292.878741] dump_stack+0x107/0x167 [ 1292.879056] should_fail.cold+0x5/0xa [ 1292.879389] ? create_object.isra.0+0x3a/0xa20 [ 1292.879783] should_failslab+0x5/0x20 [ 1292.880113] kmem_cache_alloc+0x5b/0x310 [ 1292.880464] ? generic_file_splice_read+0x582/0x6d0 [ 1292.881011] create_object.isra.0+0x3a/0xa20 [ 1292.881388] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1292.881829] __kmalloc+0x16e/0x390 [ 1292.882148] iter_file_splice_write+0x16d/0xc30 [ 1292.882556] ? atime_needs_update+0x600/0x600 [ 1292.882954] ? generic_splice_sendpage+0x140/0x140 [ 1292.883378] ? pipe_to_user+0x170/0x170 [ 1292.883733] ? security_file_permission+0xb1/0xe0 [ 1292.884144] ? generic_splice_sendpage+0x140/0x140 [ 1292.884583] direct_splice_actor+0x10f/0x170 [ 1292.884972] splice_direct_to_actor+0x387/0x980 [ 1292.885380] ? pipe_to_sendpage+0x380/0x380 [ 1292.885749] ? do_splice_to+0x160/0x160 [ 1292.886087] ? security_file_permission+0xb1/0xe0 [ 1292.886503] do_splice_direct+0x1c4/0x290 [ 1292.886855] ? splice_direct_to_actor+0x980/0x980 [ 1292.887142] FAULT_INJECTION: forcing a failure. [ 1292.887142] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.887263] ? avc_policy_seqno+0x9/0x70 [ 1292.887282] ? security_file_permission+0xb1/0xe0 [ 1292.887302] do_sendfile+0x553/0x11e0 [ 1292.887327] ? do_pwritev+0x270/0x270 [ 1292.887343] ? wait_for_completion_io+0x270/0x270 [ 1292.890493] ? rcu_read_lock_any_held+0x75/0xa0 [ 1292.890886] ? vfs_write+0x354/0xb10 [ 1292.891209] __x64_sys_sendfile64+0x1d1/0x210 [ 1292.891592] ? __ia32_sys_sendfile+0x220/0x220 [ 1292.891987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.892432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.892913] do_syscall_64+0x33/0x40 [ 1292.893231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.893667] RIP: 0033:0x7fa9c58c0b19 [ 1292.893985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.895525] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1292.896169] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1292.896798] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1292.897399] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.897999] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1292.898600] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1292.899225] CPU: 1 PID: 19959 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1292.899820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.900526] Call Trace: [ 1292.900795] dump_stack+0x107/0x167 [ 1292.901110] should_fail.cold+0x5/0xa [ 1292.901444] ? file_tty_write.constprop.0+0x707/0x910 [ 1292.901889] should_failslab+0x5/0x20 [ 1292.902217] __kmalloc+0x72/0x390 [ 1292.902517] ? mutex_trylock+0x237/0x2b0 [ 1292.902865] ? file_tty_write.constprop.0+0x29f/0x910 [ 1292.903311] file_tty_write.constprop.0+0x707/0x910 [ 1292.903736] ? iter_file_splice_write+0x16d/0xc30 [ 1292.904147] ? direct_splice_actor+0x10f/0x170 [ 1292.904536] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1292.904982] ? do_splice_direct+0x1c4/0x290 [ 1292.905353] ? do_sendfile+0x553/0x11e0 [ 1292.905703] do_iter_readv_writev+0x476/0x750 [ 1292.906090] ? new_sync_write+0x660/0x660 [ 1292.906446] ? avc_policy_seqno+0x9/0x70 [ 1292.906794] ? selinux_file_permission+0x92/0x520 [ 1292.907216] ? security_file_permission+0xb1/0xe0 [ 1292.907649] do_iter_write+0x191/0x700 [ 1292.907988] ? trace_hardirqs_on+0x5b/0x180 [ 1292.908378] vfs_iter_write+0x70/0xa0 [ 1292.908741] iter_file_splice_write+0x762/0xc30 [ 1292.909176] ? generic_splice_sendpage+0x140/0x140 [ 1292.909627] ? security_file_permission+0xb1/0xe0 [ 1292.910064] ? generic_splice_sendpage+0x140/0x140 [ 1292.910504] direct_splice_actor+0x10f/0x170 [ 1292.910884] splice_direct_to_actor+0x387/0x980 [ 1292.911298] ? pipe_to_sendpage+0x380/0x380 [ 1292.911679] ? do_splice_to+0x160/0x160 [ 1292.912022] ? security_file_permission+0xb1/0xe0 [ 1292.912444] do_splice_direct+0x1c4/0x290 [ 1292.912814] ? splice_direct_to_actor+0x980/0x980 [ 1292.913225] ? avc_policy_seqno+0x9/0x70 [ 1292.913580] ? security_file_permission+0xb1/0xe0 [ 1292.914000] do_sendfile+0x553/0x11e0 [ 1292.914339] ? do_pwritev+0x270/0x270 [ 1292.914670] ? wait_for_completion_io+0x270/0x270 [ 1292.915081] ? rcu_read_lock_any_held+0x75/0xa0 [ 1292.915473] ? vfs_write+0x354/0xb10 [ 1292.915797] __x64_sys_sendfile64+0x1d1/0x210 [ 1292.916177] ? __ia32_sys_sendfile+0x220/0x220 21:23:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 1) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:23:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 9) 21:23:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) 21:23:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 29) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:23:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1292.916527] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1292.916596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.917899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.918357] do_syscall_64+0x33/0x40 [ 1292.918678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.928827] RIP: 0033:0x7f4ad87fcb19 [ 1292.929141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.930650] RSP: 002b:00007f4ad5d72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1292.931282] RAX: ffffffffffffffda RBX: 00007f4ad890ff60 RCX: 00007f4ad87fcb19 [ 1292.931870] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1292.932460] RBP: 00007f4ad5d721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.933072] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1292.933662] R13: 00007ffec1f767cf R14: 00007f4ad5d72300 R15: 0000000000022000 [ 1293.075891] FAULT_INJECTION: forcing a failure. [ 1293.075891] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.076897] CPU: 1 PID: 19957 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1293.077480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.078175] Call Trace: [ 1293.078407] dump_stack+0x107/0x167 [ 1293.078719] should_fail.cold+0x5/0xa [ 1293.079048] ? alloc_pipe_info+0x10a/0x590 [ 1293.079412] should_failslab+0x5/0x20 [ 1293.079749] kmem_cache_alloc_trace+0x55/0x320 [ 1293.080150] alloc_pipe_info+0x10a/0x590 [ 1293.080518] ? SOFTIRQ_verbose+0x10/0x10 [ 1293.080889] splice_direct_to_actor+0x774/0x980 [ 1293.081301] ? _cond_resched+0x12/0x80 [ 1293.081642] ? inode_security+0x107/0x140 [ 1293.082000] ? pipe_to_sendpage+0x380/0x380 [ 1293.082386] ? avc_policy_seqno+0x9/0x70 [ 1293.082753] ? selinux_file_permission+0x92/0x520 [ 1293.083170] ? do_splice_to+0x160/0x160 [ 1293.083528] ? security_file_permission+0xb1/0xe0 [ 1293.083947] do_splice_direct+0x1c4/0x290 [ 1293.084302] ? splice_direct_to_actor+0x980/0x980 [ 1293.084733] ? avc_policy_seqno+0x9/0x70 [ 1293.085106] ? security_file_permission+0xb1/0xe0 [ 1293.085543] do_sendfile+0x553/0x11e0 [ 1293.085881] ? do_pwritev+0x270/0x270 [ 1293.086211] ? wait_for_completion_io+0x270/0x270 [ 1293.086626] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.087025] ? vfs_write+0x354/0xb10 [ 1293.087372] __x64_sys_sendfile64+0x1d1/0x210 [ 1293.087775] ? __ia32_sys_sendfile+0x220/0x220 [ 1293.088170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.088627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.089071] do_syscall_64+0x33/0x40 [ 1293.089405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.089846] RIP: 0033:0x7f99341c2b19 [ 1293.090167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.091731] RSP: 002b:00007f9931738188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1293.092393] RAX: ffffffffffffffda RBX: 00007f99342d5f60 RCX: 00007f99341c2b19 [ 1293.093037] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1293.093642] RBP: 00007f99317381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.094263] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1293.094875] R13: 00007ffc9183063f R14: 00007f9931738300 R15: 0000000000022000 [ 1293.102766] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0xff, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1293.186472] FAULT_INJECTION: forcing a failure. [ 1293.186472] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.187657] CPU: 1 PID: 19962 Comm: syz-executor.5 Not tainted 5.10.223 #1 [ 1293.188277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.189005] Call Trace: [ 1293.189249] dump_stack+0x107/0x167 [ 1293.189576] should_fail.cold+0x5/0xa [ 1293.189924] ? register_for_each_vma+0x476/0xc00 [ 1293.190336] should_failslab+0x5/0x20 [ 1293.190665] kmem_cache_alloc_trace+0x55/0x320 [ 1293.191082] register_for_each_vma+0x476/0xc00 [ 1293.191494] __uprobe_register+0x4df/0x880 [ 1293.191884] probe_event_enable+0x368/0xa20 [ 1293.192272] ? uprobe_perf_close+0x5f0/0x5f0 [ 1293.192681] trace_uprobe_register+0x54/0x730 [ 1293.193082] perf_trace_event_init+0x554/0x9c0 [ 1293.193486] perf_uprobe_init+0x173/0x210 [ 1293.193848] perf_uprobe_event_init+0xff/0x1d0 [ 1293.194263] perf_try_init_event+0x130/0x570 [ 1293.194653] perf_event_alloc.part.0+0xd96/0x2b70 [ 1293.195084] __do_sys_perf_event_open+0x579/0x2e60 [ 1293.195532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1293.195945] ? perf_event_set_output+0x5b0/0x5b0 [ 1293.196370] ? wait_for_completion_io+0x270/0x270 [ 1293.196822] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.197280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.197734] do_syscall_64+0x33/0x40 [ 1293.198055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.198501] RIP: 0033:0x7f235e5b8b19 [ 1293.198829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.200404] RSP: 002b:00007f235bb2e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1293.201105] RAX: ffffffffffffffda RBX: 00007f235e6cbf60 RCX: 00007f235e5b8b19 [ 1293.201734] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020001d80 [ 1293.202342] RBP: 00007f235bb2e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.202964] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1293.203571] R13: 00007ffe9ec457cf R14: 00007f235bb2e300 R15: 0000000000022000 [ 1293.205135] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:23:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1293.264991] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2={0x0}, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 2) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:23:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7f) 21:23:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 10) 21:23:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 11) [ 1293.417425] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1293.549229] FAULT_INJECTION: forcing a failure. [ 1293.549229] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.550233] CPU: 0 PID: 20297 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1293.550687] FAULT_INJECTION: forcing a failure. [ 1293.550687] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.550810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.550821] Call Trace: [ 1293.552688] dump_stack+0x107/0x167 [ 1293.553498] should_fail.cold+0x5/0xa [ 1293.553832] ? iter_file_splice_write+0x16d/0xc30 [ 1293.554246] should_failslab+0x5/0x20 [ 1293.554573] __kmalloc+0x72/0x390 [ 1293.554876] iter_file_splice_write+0x16d/0xc30 [ 1293.555273] ? atime_needs_update+0x600/0x600 [ 1293.555666] ? generic_splice_sendpage+0x140/0x140 [ 1293.556084] ? pipe_to_user+0x170/0x170 [ 1293.556440] ? security_file_permission+0xb1/0xe0 [ 1293.557264] ? generic_splice_sendpage+0x140/0x140 [ 1293.560874] direct_splice_actor+0x10f/0x170 [ 1293.561250] splice_direct_to_actor+0x387/0x980 [ 1293.561644] ? pipe_to_sendpage+0x380/0x380 [ 1293.562012] ? do_splice_to+0x160/0x160 [ 1293.562349] ? security_file_permission+0xb1/0xe0 [ 1293.562761] do_splice_direct+0x1c4/0x290 [ 1293.563109] ? splice_direct_to_actor+0x980/0x980 [ 1293.563513] ? avc_policy_seqno+0x9/0x70 [ 1293.563861] ? security_file_permission+0xb1/0xe0 [ 1293.564277] do_sendfile+0x553/0x11e0 [ 1293.564615] ? do_pwritev+0x270/0x270 [ 1293.564953] ? wait_for_completion_io+0x270/0x270 [ 1293.565364] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.565753] ? vfs_write+0x354/0xb10 [ 1293.566074] __x64_sys_sendfile64+0x1d1/0x210 [ 1293.566452] ? __ia32_sys_sendfile+0x220/0x220 [ 1293.566841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.567283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.567718] do_syscall_64+0x33/0x40 [ 1293.568033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.568465] RIP: 0033:0x7fa9c58c0b19 [ 1293.568797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.570325] RSP: 002b:00007fa9c2e15188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1293.570969] RAX: ffffffffffffffda RBX: 00007fa9c59d4020 RCX: 00007fa9c58c0b19 [ 1293.571567] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1293.572165] RBP: 00007fa9c2e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.572776] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1293.573375] R13: 00007fff543b2a4f R14: 00007fa9c2e15300 R15: 0000000000022000 [ 1293.573998] CPU: 1 PID: 20299 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1293.574593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.575285] Call Trace: [ 1293.575527] dump_stack+0x107/0x167 [ 1293.575845] should_fail.cold+0x5/0xa [ 1293.576174] ? create_object.isra.0+0x3a/0xa20 [ 1293.576564] should_failslab+0x5/0x20 [ 1293.576906] kmem_cache_alloc+0x5b/0x310 [ 1293.577257] create_object.isra.0+0x3a/0xa20 [ 1293.577630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.578062] kmem_cache_alloc_trace+0x151/0x320 [ 1293.578464] alloc_pipe_info+0x10a/0x590 [ 1293.578812] ? SOFTIRQ_verbose+0x10/0x10 [ 1293.579162] splice_direct_to_actor+0x774/0x980 [ 1293.579561] ? _cond_resched+0x12/0x80 [ 1293.579904] ? inode_security+0x107/0x140 [ 1293.580259] ? pipe_to_sendpage+0x380/0x380 [ 1293.580634] ? avc_policy_seqno+0x9/0x70 [ 1293.580990] ? selinux_file_permission+0x92/0x520 [ 1293.581405] ? do_splice_to+0x160/0x160 [ 1293.581746] ? security_file_permission+0xb1/0xe0 [ 1293.582161] do_splice_direct+0x1c4/0x290 [ 1293.582516] ? splice_direct_to_actor+0x980/0x980 [ 1293.582921] ? avc_policy_seqno+0x9/0x70 [ 1293.583275] ? security_file_permission+0xb1/0xe0 [ 1293.583691] do_sendfile+0x553/0x11e0 [ 1293.584025] ? do_pwritev+0x270/0x270 [ 1293.584352] ? wait_for_completion_io+0x270/0x270 [ 1293.584772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.585164] ? vfs_write+0x354/0xb10 [ 1293.585488] __x64_sys_sendfile64+0x1d1/0x210 [ 1293.585891] ? __ia32_sys_sendfile+0x220/0x220 [ 1293.586299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.586766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.587226] do_syscall_64+0x33/0x40 [ 1293.587557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.588010] RIP: 0033:0x7f99341c2b19 [ 1293.588339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.589903] RSP: 002b:00007f9931717188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1293.590811] RAX: ffffffffffffffda RBX: 00007f99342d6020 RCX: 00007f99341c2b19 [ 1293.592385] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1293.594071] RBP: 00007f99317171d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.595755] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1293.597437] R13: 00007ffc9183063f R14: 00007f9931717300 R15: 0000000000022000 [ 1293.601578] FAULT_INJECTION: forcing a failure. [ 1293.601578] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.604273] CPU: 0 PID: 20298 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1293.606274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.606279] Call Trace: [ 1293.606292] dump_stack+0x107/0x167 [ 1293.606306] should_fail.cold+0x5/0xa [ 1293.606319] ? create_object.isra.0+0x3a/0xa20 [ 1293.606333] should_failslab+0x5/0x20 [ 1293.606363] kmem_cache_alloc+0x5b/0x310 [ 1293.612521] create_object.isra.0+0x3a/0xa20 [ 1293.613549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.614733] __kmalloc+0x16e/0x390 [ 1293.615551] file_tty_write.constprop.0+0x707/0x910 [ 1293.616732] ? iter_file_splice_write+0x16d/0xc30 [ 1293.617827] ? direct_splice_actor+0x10f/0x170 [ 1293.618889] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1293.620025] ? do_splice_direct+0x1c4/0x290 [ 1293.621039] ? do_sendfile+0x553/0x11e0 [ 1293.621955] do_iter_readv_writev+0x476/0x750 [ 1293.622997] ? new_sync_write+0x660/0x660 [ 1293.623799] ? avc_policy_seqno+0x9/0x70 [ 1293.624748] ? selinux_file_permission+0x92/0x520 [ 1293.625870] ? security_file_permission+0xb1/0xe0 [ 1293.626983] do_iter_write+0x191/0x700 [ 1293.627904] ? trace_hardirqs_on+0x5b/0x180 [ 1293.628924] vfs_iter_write+0x70/0xa0 [ 1293.629816] iter_file_splice_write+0x762/0xc30 [ 1293.630889] ? generic_splice_sendpage+0x140/0x140 [ 1293.632052] ? security_file_permission+0xb1/0xe0 [ 1293.633169] ? generic_splice_sendpage+0x140/0x140 [ 1293.634324] direct_splice_actor+0x10f/0x170 [ 1293.635352] splice_direct_to_actor+0x387/0x980 [ 1293.636436] ? pipe_to_sendpage+0x380/0x380 [ 1293.637449] ? do_splice_to+0x160/0x160 [ 1293.638375] ? security_file_permission+0xb1/0xe0 [ 1293.639493] do_splice_direct+0x1c4/0x290 [ 1293.640462] ? splice_direct_to_actor+0x980/0x980 [ 1293.641590] ? avc_policy_seqno+0x9/0x70 [ 1293.642556] ? security_file_permission+0xb1/0xe0 [ 1293.643676] do_sendfile+0x553/0x11e0 [ 1293.644594] ? do_pwritev+0x270/0x270 [ 1293.645481] ? wait_for_completion_io+0x270/0x270 [ 1293.646616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.647691] ? vfs_write+0x354/0xb10 [ 1293.648571] __x64_sys_sendfile64+0x1d1/0x210 [ 1293.649614] ? __ia32_sys_sendfile+0x220/0x220 [ 1293.650691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.651889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.653134] do_syscall_64+0x33/0x40 [ 1293.653992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.655195] RIP: 0033:0x7f4ad87fcb19 [ 1293.656051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.660406] RSP: 002b:00007f4ad5d51188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1293.662185] RAX: ffffffffffffffda RBX: 00007f4ad8910020 RCX: 00007f4ad87fcb19 [ 1293.663841] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1293.665520] RBP: 00007f4ad5d511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.667182] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1293.668854] R13: 00007ffec1f767cf R14: 00007f4ad5d51300 R15: 0000000000022000 21:23:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 3) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:23:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:23:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:23:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x5}, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 11) 21:23:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:23:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 12) 21:23:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1308.671564] FAULT_INJECTION: forcing a failure. [ 1308.671564] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.672694] CPU: 1 PID: 20412 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1308.673396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.674194] Call Trace: [ 1308.674430] dump_stack+0x107/0x167 [ 1308.674737] should_fail.cold+0x5/0xa [ 1308.675156] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1308.675601] should_failslab+0x5/0x20 [ 1308.675973] __kmalloc_node+0x76/0x420 [ 1308.676359] ? lock_downgrade+0x6d0/0x6d0 [ 1308.676714] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1308.677277] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1308.677703] ? trace_hardirqs_on+0x5b/0x180 [ 1308.678185] kmem_cache_alloc_trace+0x169/0x320 [ 1308.678587] alloc_pipe_info+0x10a/0x590 [ 1308.678977] ? SOFTIRQ_verbose+0x10/0x10 [ 1308.679375] splice_direct_to_actor+0x774/0x980 [ 1308.679772] ? _cond_resched+0x12/0x80 [ 1308.680202] ? inode_security+0x107/0x140 [ 1308.680556] ? pipe_to_sendpage+0x380/0x380 [ 1308.681055] ? avc_policy_seqno+0x9/0x70 [ 1308.681407] ? selinux_file_permission+0x92/0x520 [ 1308.681811] ? do_splice_to+0x160/0x160 [ 1308.682244] ? security_file_permission+0xb1/0xe0 [ 1308.682657] do_splice_direct+0x1c4/0x290 [ 1308.683125] ? splice_direct_to_actor+0x980/0x980 [ 1308.683551] ? avc_policy_seqno+0x9/0x70 [ 1308.683959] ? security_file_permission+0xb1/0xe0 [ 1308.684442] do_sendfile+0x553/0x11e0 [ 1308.684773] ? do_pwritev+0x270/0x270 [ 1308.685230] ? wait_for_completion_io+0x270/0x270 [ 1308.685644] ? rcu_read_lock_any_held+0x75/0xa0 [ 1308.686155] ? vfs_write+0x354/0xb10 [ 1308.686493] __x64_sys_sendfile64+0x1d1/0x210 [ 1308.686933] ? __ia32_sys_sendfile+0x220/0x220 [ 1308.687402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1308.687844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1308.688371] do_syscall_64+0x33/0x40 [ 1308.688686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.689272] RIP: 0033:0x7f99341c2b19 [ 1308.689606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.691398] RSP: 002b:00007f9931738188 EFLAGS: 00000246 [ 1308.691414] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1308.692741] ORIG_RAX: 0000000000000028 [ 1308.693259] RAX: ffffffffffffffda RBX: 00007f99342d5f60 RCX: 00007f99341c2b19 [ 1308.693859] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1308.694553] RBP: 00007f99317381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.694690] FAULT_INJECTION: forcing a failure. [ 1308.694690] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.695239] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1308.695247] R13: 00007ffc9183063f R14: 00007f9931738300 R15: 0000000000022000 [ 1308.697623] CPU: 0 PID: 20413 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1308.698257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.698949] Call Trace: [ 1308.699226] dump_stack+0x107/0x167 [ 1308.699828] should_fail.cold+0x5/0xa [ 1308.700204] ? create_object.isra.0+0x3a/0xa20 [ 1308.700600] should_failslab+0x5/0x20 [ 1308.700927] kmem_cache_alloc+0x5b/0x310 [ 1308.701350] ? generic_file_splice_read+0x582/0x6d0 [ 1308.701782] create_object.isra.0+0x3a/0xa20 [ 1308.702238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1308.702671] __kmalloc+0x16e/0x390 [ 1308.702980] iter_file_splice_write+0x16d/0xc30 [ 1308.703419] ? atime_needs_update+0x600/0x600 [ 1308.703810] ? generic_splice_sendpage+0x140/0x140 [ 1308.704268] ? pipe_to_user+0x170/0x170 [ 1308.704624] ? security_file_permission+0xb1/0xe0 [ 1308.705119] ? generic_splice_sendpage+0x140/0x140 [ 1308.705538] direct_splice_actor+0x10f/0x170 [ 1308.705916] splice_direct_to_actor+0x387/0x980 [ 1308.706389] ? pipe_to_sendpage+0x380/0x380 [ 1308.706760] ? do_splice_to+0x160/0x160 [ 1308.707147] ? security_file_permission+0xb1/0xe0 [ 1308.707562] do_splice_direct+0x1c4/0x290 [ 1308.707913] ? splice_direct_to_actor+0x980/0x980 [ 1308.708367] ? avc_policy_seqno+0x9/0x70 [ 1308.708718] ? security_file_permission+0xb1/0xe0 [ 1308.709202] do_sendfile+0x553/0x11e0 [ 1308.709543] ? do_pwritev+0x270/0x270 [ 1308.709870] ? wait_for_completion_io+0x270/0x270 [ 1308.710358] ? rcu_read_lock_any_held+0x75/0xa0 [ 1308.710750] ? vfs_write+0x354/0xb10 [ 1308.711122] __x64_sys_sendfile64+0x1d1/0x210 [ 1308.711505] ? __ia32_sys_sendfile+0x220/0x220 [ 1308.711896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1308.715689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1308.716181] do_syscall_64+0x33/0x40 [ 1308.716499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.716941] RIP: 0033:0x7fa9c58c0b19 [ 1308.717303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.718882] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1308.719567] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1308.720239] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1308.720837] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.721502] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1308.722145] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1308.756440] FAULT_INJECTION: forcing a failure. [ 1308.756440] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.759147] CPU: 0 PID: 20421 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1308.759732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.760439] Call Trace: [ 1308.760663] dump_stack+0x107/0x167 [ 1308.761002] should_fail.cold+0x5/0xa [ 1308.761349] ? tty_buffer_alloc+0x243/0x2b0 [ 1308.761714] should_failslab+0x5/0x20 [ 1308.762036] __kmalloc+0x72/0x390 [ 1308.762334] tty_buffer_alloc+0x243/0x2b0 [ 1308.762684] __tty_buffer_request_room+0x156/0x2a0 [ 1308.763102] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1308.763570] ? n_tty_write+0x1eb/0xfe0 [ 1308.763905] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1308.764406] pty_write+0xe6/0x110 [ 1308.764699] n_tty_write+0xa86/0xfe0 [ 1308.765058] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1308.765490] ? _copy_from_iter+0x37b/0xe80 [ 1308.765847] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1308.766282] file_tty_write.constprop.0+0x529/0x910 [ 1308.766702] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1308.767127] do_iter_readv_writev+0x476/0x750 [ 1308.767506] ? new_sync_write+0x660/0x660 [ 1308.767855] ? avc_policy_seqno+0x9/0x70 [ 1308.768198] ? selinux_file_permission+0x92/0x520 [ 1308.768607] ? security_file_permission+0xb1/0xe0 [ 1308.769052] do_iter_write+0x191/0x700 [ 1308.769385] ? trace_hardirqs_on+0x5b/0x180 [ 1308.769752] vfs_iter_write+0x70/0xa0 [ 1308.770075] iter_file_splice_write+0x762/0xc30 [ 1308.770473] ? generic_splice_sendpage+0x140/0x140 [ 1308.770894] ? security_file_permission+0xb1/0xe0 [ 1308.771302] ? generic_splice_sendpage+0x140/0x140 [ 1308.771714] direct_splice_actor+0x10f/0x170 [ 1308.772087] splice_direct_to_actor+0x387/0x980 [ 1308.772479] ? pipe_to_sendpage+0x380/0x380 [ 1308.772842] ? do_splice_to+0x160/0x160 [ 1308.773220] ? security_file_permission+0xb1/0xe0 [ 1308.773627] do_splice_direct+0x1c4/0x290 [ 1308.773976] ? splice_direct_to_actor+0x980/0x980 [ 1308.774380] ? avc_policy_seqno+0x9/0x70 [ 1308.774725] ? security_file_permission+0xb1/0xe0 [ 1308.775134] do_sendfile+0x553/0x11e0 [ 1308.775459] ? do_pwritev+0x270/0x270 [ 1308.775780] ? wait_for_completion_io+0x270/0x270 [ 1308.776186] ? rcu_read_lock_any_held+0x75/0xa0 [ 1308.776576] ? vfs_write+0x354/0xb10 [ 1308.776893] __x64_sys_sendfile64+0x1d1/0x210 [ 1308.777309] ? __ia32_sys_sendfile+0x220/0x220 [ 1308.777696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1308.778137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1308.778572] do_syscall_64+0x33/0x40 [ 1308.778884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.779313] RIP: 0033:0x7f4ad87fcb19 [ 1308.779625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.781199] RSP: 002b:00007f4ad5d51188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1308.781837] RAX: ffffffffffffffda RBX: 00007f4ad8910020 RCX: 00007f4ad87fcb19 [ 1308.782432] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1308.783032] RBP: 00007f4ad5d511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.783626] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1308.784221] R13: 00007ffec1f767cf R14: 00007f4ad5d51300 R15: 0000000000022000 [ 1308.784833] [ 1308.784838] ====================================================== [ 1308.784843] WARNING: possible circular locking dependency detected [ 1308.784846] 5.10.223 #1 Not tainted [ 1308.784851] ------------------------------------------------------ [ 1308.784855] syz-executor.4/20421 is trying to acquire lock: [ 1308.784858] ffffffff84f0ce80 (console_owner){-.-.}-{0:0}, at: console_unlock+0x2e1/0xb40 [ 1308.784871] [ 1308.784875] but task is already holding lock: [ 1308.784878] ffff88800dec6958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 1308.784891] [ 1308.784895] which lock already depends on the new lock. [ 1308.784896] [ 1308.784898] [ 1308.784902] the existing dependency chain (in reverse order) is: [ 1308.784904] [ 1308.784906] -> #2 (&port->lock){-.-.}-{2:2}: [ 1308.784918] _raw_spin_lock_irqsave+0x36/0x60 [ 1308.784921] tty_port_tty_get+0x1f/0x100 [ 1308.784924] tty_port_default_wakeup+0x11/0x40 [ 1308.784928] serial8250_tx_chars+0x51f/0xb00 [ 1308.784938] serial8250_handle_irq+0x4e4/0x660 [ 1308.784942] serial8250_default_handle_irq+0x96/0x210 [ 1308.784945] serial8250_interrupt+0xf4/0x1b0 [ 1308.784963] __handle_irq_event_percpu+0x2ef/0x6d0 [ 1308.784966] handle_irq_event+0xff/0x280 [ 1308.784969] handle_edge_irq+0x249/0xd00 [ 1308.784973] asm_call_irq_on_stack+0x12/0x20 [ 1308.784976] common_interrupt+0xdd/0x1a0 [ 1308.784980] asm_common_interrupt+0x1e/0x40 [ 1308.784983] _raw_spin_unlock_irqrestore+0x25/0x40 [ 1308.784987] uart_write+0x304/0x580 [ 1308.784990] do_output_char+0x5e8/0x870 [ 1308.784993] n_tty_write+0x4c9/0xfe0 [ 1308.784997] file_tty_write.constprop.0+0x529/0x910 [ 1308.785000] redirected_tty_write+0xa5/0xd0 [ 1308.785004] do_iter_readv_writev+0x476/0x750 [ 1308.785007] do_iter_write+0x191/0x700 [ 1308.785010] vfs_writev+0x1ae/0x620 [ 1308.785013] do_writev+0x139/0x300 [ 1308.785016] do_syscall_64+0x33/0x40 [ 1308.785020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.785022] [ 1308.785024] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1308.785045] _raw_spin_lock_irqsave+0x36/0x60 [ 1308.785049] serial8250_console_write+0x9f5/0xc60 [ 1308.785052] console_unlock+0x82a/0xb40 [ 1308.785055] register_console+0x40c/0x850 [ 1308.785058] univ8250_console_init+0x3a/0x4a [ 1308.785062] console_init+0x24c/0x356 [ 1308.785065] start_kernel+0x2e6/0x489 [ 1308.785069] secondary_startup_64_no_verify+0xbe/0xcb [ 1308.785070] [ 1308.785072] -> #0 (console_owner){-.-.}-{0:0}: [ 1308.785084] __lock_acquire+0x29e7/0x5b00 [ 1308.785088] lock_acquire+0x197/0x470 [ 1308.785091] console_unlock+0x360/0xb40 [ 1308.785094] vprintk_emit+0x1de/0x4e0 [ 1308.785097] vprintk_func+0x8b/0x140 [ 1308.785099] printk+0xba/0xf1 [ 1308.785102] should_fail+0x47a/0x5a0 [ 1308.785106] should_failslab+0x5/0x20 [ 1308.785109] __kmalloc+0x72/0x390 [ 1308.785112] tty_buffer_alloc+0x243/0x2b0 [ 1308.785115] __tty_buffer_request_room+0x156/0x2a0 [ 1308.785119] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1308.785124] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1308.785126] pty_write+0xe6/0x110 [ 1308.785129] n_tty_write+0xa86/0xfe0 [ 1308.785133] file_tty_write.constprop.0+0x529/0x910 [ 1308.785136] do_iter_readv_writev+0x476/0x750 [ 1308.785140] do_iter_write+0x191/0x700 [ 1308.785143] vfs_iter_write+0x70/0xa0 [ 1308.785146] iter_file_splice_write+0x762/0xc30 [ 1308.785150] direct_splice_actor+0x10f/0x170 [ 1308.785153] splice_direct_to_actor+0x387/0x980 [ 1308.785157] do_splice_direct+0x1c4/0x290 [ 1308.785160] do_sendfile+0x553/0x11e0 [ 1308.785163] __x64_sys_sendfile64+0x1d1/0x210 [ 1308.785166] do_syscall_64+0x33/0x40 [ 1308.785170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.785171] [ 1308.785175] other info that might help us debug this: [ 1308.785176] [ 1308.785179] Chain exists of: [ 1308.785180] console_owner --> &port_lock_key --> &port->lock [ 1308.785195] [ 1308.785199] Possible unsafe locking scenario: [ 1308.785200] [ 1308.785203] CPU0 CPU1 [ 1308.785207] ---- ---- [ 1308.785209] lock(&port->lock); [ 1308.785216] lock(&port_lock_key); [ 1308.785224] lock(&port->lock); [ 1308.785230] lock(console_owner); [ 1308.785236] [ 1308.785239] *** DEADLOCK *** [ 1308.785240] [ 1308.785243] 6 locks held by syz-executor.4/20421: [ 1308.785245] #0: ffff88804f884098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x90 [ 1308.785260] #1: ffff88804f884130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x29f/0x910 [ 1308.785276] #2: ffff88804f8842e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bf/0xfe0 [ 1308.785291] #3: ffffc90013a63378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0xa4d/0xfe0 [ 1308.785306] #4: ffff88800dec6958 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 1308.785322] #5: ffffffff84fed200 (console_lock){+.+.}-{0:0}, at: vprintk_func+0x8b/0x140 [ 1308.785336] [ 1308.785338] stack backtrace: [ 1308.785343] CPU: 0 PID: 20421 Comm: syz-executor.4 Not tainted 5.10.223 #1 [ 1308.785348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1308.785350] Call Trace: [ 1308.785353] dump_stack+0x107/0x167 [ 1308.785356] check_noncircular+0x263/0x2e0 [ 1308.785359] ? stack_trace_consume_entry+0x160/0x160 [ 1308.785363] ? print_circular_bug+0x470/0x470 [ 1308.785365] ? memcpy+0x39/0x60 [ 1308.785368] ? alloc_chain_hlocks+0x342/0x5a0 [ 1308.785371] __lock_acquire+0x29e7/0x5b00 [ 1308.785375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1308.785378] ? SOFTIRQ_verbose+0x10/0x10 [ 1308.785381] ? __lockdep_reset_lock+0x180/0x180 [ 1308.785384] lock_acquire+0x197/0x470 [ 1308.785387] ? console_unlock+0x2e1/0xb40 [ 1308.785390] ? lock_release+0x680/0x680 [ 1308.785393] ? lock_downgrade+0x6d0/0x6d0 [ 1308.785396] ? do_raw_spin_lock+0x121/0x260 [ 1308.785399] ? rwlock_bug.part.0+0x90/0x90 [ 1308.785402] console_unlock+0x360/0xb40 [ 1308.785405] ? console_unlock+0x2e1/0xb40 [ 1308.785408] ? devkmsg_read+0x730/0x730 [ 1308.785411] ? lock_release+0x680/0x680 [ 1308.785414] ? do_raw_spin_unlock+0x4f/0x220 [ 1308.785417] ? vprintk_func+0x8b/0x140 [ 1308.785419] vprintk_emit+0x1de/0x4e0 [ 1308.785422] vprintk_func+0x8b/0x140 [ 1308.785424] printk+0xba/0xf1 [ 1308.785428] ? record_print_text.cold+0x16/0x16 [ 1308.785430] should_fail+0x47a/0x5a0 [ 1308.785434] ? tty_buffer_alloc+0x243/0x2b0 [ 1308.785436] should_failslab+0x5/0x20 [ 1308.785439] __kmalloc+0x72/0x390 [ 1308.785442] tty_buffer_alloc+0x243/0x2b0 [ 1308.785445] __tty_buffer_request_room+0x156/0x2a0 [ 1308.785449] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1308.785452] ? n_tty_write+0x1eb/0xfe0 [ 1308.785456] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1308.785459] pty_write+0xe6/0x110 [ 1308.785461] n_tty_write+0xa86/0xfe0 [ 1308.785465] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1308.785468] ? _copy_from_iter+0x37b/0xe80 [ 1308.785471] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1308.785475] file_tty_write.constprop.0+0x529/0x910 [ 1308.785478] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1308.785481] do_iter_readv_writev+0x476/0x750 [ 1308.785484] ? new_sync_write+0x660/0x660 [ 1308.785487] ? avc_policy_seqno+0x9/0x70 [ 1308.785491] ? selinux_file_permission+0x92/0x520 [ 1308.785494] ? security_file_permission+0xb1/0xe0 [ 1308.785497] do_iter_write+0x191/0x700 [ 1308.785500] ? trace_hardirqs_on+0x5b/0x180 [ 1308.785503] vfs_iter_write+0x70/0xa0 [ 1308.785506] iter_file_splice_write+0x762/0xc30 [ 1308.785510] ? generic_splice_sendpage+0x140/0x140 [ 1308.785513] ? security_file_permission+0xb1/0xe0 [ 1308.785516] ? generic_splice_sendpage+0x140/0x140 [ 1308.785520] direct_splice_actor+0x10f/0x170 [ 1308.785523] splice_direct_to_actor+0x387/0x980 [ 1308.785526] ? pipe_to_sendpage+0x380/0x380 [ 1308.785529] ? do_splice_to+0x160/0x160 [ 1308.785532] ? security_file_permission+0xb1/0xe0 [ 1308.785535] do_splice_direct+0x1c4/0x290 [ 1308.785539] ? splice_direct_to_actor+0x980/0x980 [ 1308.785542] ? avc_policy_seqno+0x9/0x70 [ 1308.785545] ? security_file_permission+0xb1/0xe0 [ 1308.785548] do_sendfile+0x553/0x11e0 [ 1308.785551] ? do_pwritev+0x270/0x270 [ 1308.785554] ? wait_for_completion_io+0x270/0x270 [ 1308.785557] ? rcu_read_lock_any_held+0x75/0xa0 [ 1308.785560] ? vfs_write+0x354/0xb10 [ 1308.785563] __x64_sys_sendfile64+0x1d1/0x210 [ 1308.785567] ? __ia32_sys_sendfile+0x220/0x220 [ 1308.785570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1308.785574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1308.785576] do_syscall_64+0x33/0x40 [ 1308.785580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1308.785583] RIP: 0033:0x7f4ad87fcb19 [ 1308.785593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1308.785597] RSP: 002b:00007f4ad5d51188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1308.785604] RAX: ffffffffffffffda RBX: 00007f4ad8910020 RCX: 00007f4ad87fcb19 [ 1308.785609] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1308.785614] RBP: 00007f4ad5d511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1308.785618] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1308.785623] R13: 00007ffec1f767cf R14: 00007f4ad5d51300 R15: 0000000000022000 21:23:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x0}, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1308.931086] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) 21:23:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:23:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x200402, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 12) 21:23:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 4) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:23:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x2}, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1309.044303] FAULT_INJECTION: forcing a failure. [ 1309.044303] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.045442] CPU: 0 PID: 20637 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1309.046142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.046877] Call Trace: [ 1309.047192] dump_stack+0x107/0x167 [ 1309.047563] should_fail.cold+0x5/0xa [ 1309.047898] ? create_object.isra.0+0x3a/0xa20 [ 1309.047914] should_failslab+0x5/0x20 [ 1309.047926] kmem_cache_alloc+0x5b/0x310 [ 1309.047945] create_object.isra.0+0x3a/0xa20 [ 1309.047957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.047974] __kmalloc+0x16e/0x390 [ 1309.048001] alloc_pipe_info+0x1e5/0x590 [ 1309.048055] ? SOFTIRQ_verbose+0x10/0x10 [ 1309.048073] splice_direct_to_actor+0x774/0x980 [ 1309.048091] ? _cond_resched+0x12/0x80 [ 1309.048104] ? inode_security+0x107/0x140 21:23:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) [ 1309.048113] ? pipe_to_sendpage+0x380/0x380 [ 1309.048125] ? avc_policy_seqno+0x9/0x70 [ 1309.048136] ? selinux_file_permission+0x92/0x520 [ 1309.048149] ? do_splice_to+0x160/0x160 [ 1309.048164] ? security_file_permission+0xb1/0xe0 [ 1309.048185] do_splice_direct+0x1c4/0x290 [ 1309.048198] ? splice_direct_to_actor+0x980/0x980 [ 1309.048208] ? avc_policy_seqno+0x9/0x70 21:23:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 5) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) [ 1309.048228] ? security_file_permission+0xb1/0xe0 [ 1309.048250] do_sendfile+0x553/0x11e0 [ 1309.048274] ? do_pwritev+0x270/0x270 [ 1309.048289] ? wait_for_completion_io+0x270/0x270 [ 1309.048304] ? vfs_write+0x354/0xb10 [ 1309.048323] __x64_sys_sendfile64+0x1d1/0x210 21:23:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x3}, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) [ 1309.048337] ? __ia32_sys_sendfile+0x220/0x220 [ 1309.048356] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1309.048368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.048384] do_syscall_64+0x33/0x40 [ 1309.048396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.048404] RIP: 0033:0x7f99341c2b19 [ 1309.048416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.048423] RSP: 002b:00007f9931738188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1309.048437] RAX: ffffffffffffffda RBX: 00007f99342d5f60 RCX: 00007f99341c2b19 [ 1309.048444] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1309.048451] RBP: 00007f99317381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.048457] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1309.048465] R13: 00007ffc9183063f R14: 00007f9931738300 R15: 0000000000022000 [ 1309.051656] FAULT_INJECTION: forcing a failure. [ 1309.051656] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.051666] CPU: 0 PID: 20641 Comm: syz-executor.7 Not tainted 5.10.223 #1 [ 1309.051672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.051674] Call Trace: [ 1309.051685] dump_stack+0x107/0x167 [ 1309.051696] should_fail.cold+0x5/0xa [ 1309.051705] ? SOFTIRQ_verbose+0x10/0x10 [ 1309.051717] ? tty_buffer_alloc+0x243/0x2b0 [ 1309.051728] should_failslab+0x5/0x20 [ 1309.051738] __kmalloc+0x72/0x390 [ 1309.051751] tty_buffer_alloc+0x243/0x2b0 [ 1309.051763] __tty_buffer_request_room+0x156/0x2a0 [ 1309.051777] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1309.051787] ? n_tty_write+0x1eb/0xfe0 [ 1309.051801] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1309.051815] pty_write+0xe6/0x110 [ 1309.051825] n_tty_write+0xa86/0xfe0 [ 1309.051838] ? lock_release+0x4d1/0x680 [ 1309.051858] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1309.051870] ? _copy_from_iter+0x37b/0xe80 [ 1309.051882] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 1309.051900] file_tty_write.constprop.0+0x529/0x910 [ 1309.051910] ? n_tty_receive_char_lnext+0x6f0/0x6f0 [ 1309.051925] do_iter_readv_writev+0x476/0x750 [ 1309.051937] ? new_sync_write+0x660/0x660 [ 1309.051947] ? avc_policy_seqno+0x9/0x70 [ 1309.051956] ? selinux_file_permission+0x92/0x520 [ 1309.051970] ? security_file_permission+0xb1/0xe0 [ 1309.051984] do_iter_write+0x191/0x700 [ 1309.051996] ? trace_hardirqs_on+0x5b/0x180 [ 1309.052048] vfs_iter_write+0x70/0xa0 [ 1309.052062] iter_file_splice_write+0x762/0xc30 [ 1309.052078] ? generic_splice_sendpage+0x140/0x140 [ 1309.052096] ? security_file_permission+0xb1/0xe0 [ 1309.052107] ? generic_splice_sendpage+0x140/0x140 [ 1309.052117] direct_splice_actor+0x10f/0x170 [ 1309.052128] splice_direct_to_actor+0x387/0x980 [ 1309.052140] ? pipe_to_sendpage+0x380/0x380 [ 1309.052151] ? do_splice_to+0x160/0x160 [ 1309.052162] ? security_file_permission+0xb1/0xe0 [ 1309.052174] do_splice_direct+0x1c4/0x290 [ 1309.052184] ? splice_direct_to_actor+0x980/0x980 [ 1309.052193] ? avc_policy_seqno+0x9/0x70 [ 1309.052206] ? security_file_permission+0xb1/0xe0 [ 1309.052220] do_sendfile+0x553/0x11e0 [ 1309.052235] ? do_pwritev+0x270/0x270 [ 1309.052246] ? wait_for_completion_io+0x270/0x270 [ 1309.052256] ? vfs_write+0x354/0xb10 [ 1309.052270] __x64_sys_sendfile64+0x1d1/0x210 [ 1309.052281] ? __ia32_sys_sendfile+0x220/0x220 [ 1309.052293] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1309.052303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.052313] do_syscall_64+0x33/0x40 [ 1309.052323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.052329] RIP: 0033:0x7fa9c58c0b19 [ 1309.052339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.052344] RSP: 002b:00007fa9c2e36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1309.052356] RAX: ffffffffffffffda RBX: 00007fa9c59d3f60 RCX: 00007fa9c58c0b19 [ 1309.052361] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1309.052367] RBP: 00007fa9c2e361d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.052373] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000002 [ 1309.052379] R13: 00007fff543b2a4f R14: 00007fa9c2e36300 R15: 0000000000022000 [ 1309.081438] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1309.164050] FAULT_INJECTION: forcing a failure. [ 1309.164050] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.164064] CPU: 1 PID: 20775 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1309.164071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.164074] Call Trace: [ 1309.164092] dump_stack+0x107/0x167 [ 1309.164104] should_fail.cold+0x5/0xa [ 1309.164124] ? kvmalloc_node+0x119/0x170 [ 1309.164136] should_failslab+0x5/0x20 [ 1309.164148] __kmalloc_node+0x76/0x420 [ 1309.164163] kvmalloc_node+0x119/0x170 [ 1309.164175] seq_read_iter+0x81c/0x12b0 [ 1309.164187] ? perf_trace_lock+0xac/0x490 [ 1309.164207] proc_reg_read_iter+0x20a/0x2e0 [ 1309.164219] generic_file_splice_read+0x455/0x6d0 [ 1309.164231] ? pipe_to_user+0x170/0x170 [ 1309.164241] ? lock_downgrade+0x6d0/0x6d0 [ 1309.164257] ? fsnotify_perm.part.0+0x22d/0x620 [ 1309.164271] ? security_file_permission+0xb1/0xe0 [ 1309.164282] ? pipe_to_user+0x170/0x170 [ 1309.164292] do_splice_to+0x10e/0x160 [ 1309.164305] splice_direct_to_actor+0x2fe/0x980 [ 1309.164317] ? pipe_to_sendpage+0x380/0x380 [ 1309.164328] ? do_splice_to+0x160/0x160 [ 1309.164340] ? security_file_permission+0xb1/0xe0 [ 1309.164354] do_splice_direct+0x1c4/0x290 [ 1309.164365] ? splice_direct_to_actor+0x980/0x980 [ 1309.164375] ? avc_policy_seqno+0x9/0x70 [ 1309.164389] ? security_file_permission+0xb1/0xe0 [ 1309.164406] do_sendfile+0x553/0x11e0 [ 1309.164421] ? do_pwritev+0x270/0x270 [ 1309.164435] ? wait_for_completion_io+0x270/0x270 [ 1309.164447] ? vfs_write+0x354/0xb10 [ 1309.164461] __x64_sys_sendfile64+0x1d1/0x210 [ 1309.164473] ? __ia32_sys_sendfile+0x220/0x220 [ 1309.164488] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1309.164500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.164511] do_syscall_64+0x33/0x40 [ 1309.164522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.164530] RIP: 0033:0x7f99341c2b19 [ 1309.164542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.164548] RSP: 002b:00007f9931738188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1309.164561] RAX: ffffffffffffffda RBX: 00007f99342d5f60 RCX: 00007f99341c2b19 [ 1309.164568] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1309.164575] RBP: 00007f99317381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.164581] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1309.164589] R13: 00007ffc9183063f R14: 00007f9931738300 R15: 0000000000022000 [ 1309.192584] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1309.212366] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 21:23:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r0, &(0x7f00000001c0), 0x2, 0x0) 21:23:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) 21:23:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 6) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:23:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) [ 1309.346796] FAULT_INJECTION: forcing a failure. [ 1309.346796] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.347804] CPU: 0 PID: 20860 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1309.348390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.349104] Call Trace: [ 1309.349343] dump_stack+0x107/0x167 [ 1309.349660] should_fail.cold+0x5/0xa [ 1309.349991] ? create_object.isra.0+0x3a/0xa20 [ 1309.350387] should_failslab+0x5/0x20 [ 1309.350715] kmem_cache_alloc+0x5b/0x310 [ 1309.351068] create_object.isra.0+0x3a/0xa20 [ 1309.351443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.351886] __kmalloc+0x16e/0x390 [ 1309.352212] alloc_pipe_info+0x1e5/0x590 [ 1309.352572] ? SOFTIRQ_verbose+0x10/0x10 [ 1309.352937] splice_direct_to_actor+0x774/0x980 [ 1309.353384] ? _cond_resched+0x12/0x80 [ 1309.353730] ? inode_security+0x107/0x140 [ 1309.354087] ? pipe_to_sendpage+0x380/0x380 [ 1309.354467] ? avc_policy_seqno+0x9/0x70 [ 1309.354822] ? selinux_file_permission+0x92/0x520 [ 1309.355241] ? do_splice_to+0x160/0x160 [ 1309.355591] ? security_file_permission+0xb1/0xe0 [ 1309.356015] do_splice_direct+0x1c4/0x290 [ 1309.356389] ? splice_direct_to_actor+0x980/0x980 [ 1309.356800] ? avc_policy_seqno+0x9/0x70 [ 1309.357184] ? security_file_permission+0xb1/0xe0 [ 1309.357620] do_sendfile+0x553/0x11e0 [ 1309.357963] ? do_pwritev+0x270/0x270 [ 1309.358304] ? wait_for_completion_io+0x270/0x270 [ 1309.358722] ? vfs_write+0x354/0xb10 [ 1309.359051] __x64_sys_sendfile64+0x1d1/0x210 [ 1309.359448] ? __ia32_sys_sendfile+0x220/0x220 [ 1309.359847] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1309.360307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.360753] do_syscall_64+0x33/0x40 [ 1309.361094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.361534] RIP: 0033:0x7f99341c2b19 [ 1309.361863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.363422] RSP: 002b:00007f9931738188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1309.364075] RAX: ffffffffffffffda RBX: 00007f99342d5f60 RCX: 00007f99341c2b19 [ 1309.364688] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1309.365313] RBP: 00007f99317381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.365925] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1309.366533] R13: 00007ffc9183063f R14: 00007f9931738300 R15: 0000000000022000 21:23:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='configfs\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) (fail_nth: 7) faccessat(r1, &(0x7f0000000740)='./file0/file1\x00', 0x0) 21:23:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x6}, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x1}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendfile(r0, r1, &(0x7f00000003c0)=0x10000, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 21:23:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x7f) 21:23:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) waitid(0x2, r1, &(0x7f00000001c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x2, 0x1000, 0x14, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2400000000000, 0x401}, 0x14441, 0xa07d, 0x7, 0x8, 0x8, 0xffffffe1, 0x4, 0x0, 0x1, 0x0, 0x20}, r1, 0xa, r0, 0x8) 21:23:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x72}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x17a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi', 0x10b000, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:23:40 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_tables_targets\x00') sendfile(r0, r1, 0x0, 0x7f) [ 1309.644881] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1309.677905] FAULT_INJECTION: forcing a failure. [ 1309.677905] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.678924] CPU: 0 PID: 20980 Comm: syz-executor.1 Not tainted 5.10.223 #1 [ 1309.679570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.680302] Call Trace: [ 1309.680535] dump_stack+0x107/0x167 [ 1309.680843] should_fail.cold+0x5/0xa [ 1309.681230] ? kvmalloc_node+0x119/0x170 [ 1309.681574] should_failslab+0x5/0x20 [ 1309.681895] __kmalloc_node+0x76/0x420 [ 1309.682276] kvmalloc_node+0x119/0x170 [ 1309.682611] seq_read_iter+0x81c/0x12b0 [ 1309.682969] proc_reg_read_iter+0x20a/0x2e0 [ 1309.683414] generic_file_splice_read+0x455/0x6d0 [ 1309.683839] ? pipe_to_user+0x170/0x170 [ 1309.684225] ? lock_downgrade+0x6d0/0x6d0 [ 1309.684589] ? fsnotify_perm.part.0+0x22d/0x620 [ 1309.685000] ? security_file_permission+0xb1/0xe0 [ 1309.685465] ? pipe_to_user+0x170/0x170 [ 1309.685805] do_splice_to+0x10e/0x160 [ 1309.686181] splice_direct_to_actor+0x2fe/0x980 [ 1309.686581] ? pipe_to_sendpage+0x380/0x380 [ 1309.686953] ? do_splice_to+0x160/0x160 [ 1309.687367] ? security_file_permission+0xb1/0xe0 [ 1309.687785] do_splice_direct+0x1c4/0x290 [ 1309.688184] ? splice_direct_to_actor+0x980/0x980 [ 1309.688599] ? avc_policy_seqno+0x9/0x70 [ 1309.688962] ? security_file_permission+0xb1/0xe0 [ 1309.689448] do_sendfile+0x553/0x11e0 [ 1309.689787] ? do_pwritev+0x270/0x270 [ 1309.690164] ? wait_for_completion_io+0x270/0x270 [ 1309.690579] ? vfs_write+0x354/0xb10 [ 1309.690904] __x64_sys_sendfile64+0x1d1/0x210 [ 1309.691358] ? __ia32_sys_sendfile+0x220/0x220 [ 1309.691751] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1309.692246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.692688] do_syscall_64+0x33/0x40 [ 1309.693057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.693500] RIP: 0033:0x7f99341c2b19 [ 1309.693816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.695454] RSP: 002b:00007f9931738188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1309.696142] RAX: ffffffffffffffda RBX: 00007f99342d5f60 RCX: 00007f99341c2b19 [ 1309.696738] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1309.697398] RBP: 00007f99317381d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.697993] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 1309.698632] R13: 00007ffc9183063f R14: 00007f9931738300 R15: 0000000000022000 [ 1309.708422] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) VM DIAGNOSIS: 21:23:40 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d97a1 RDI=ffffffff879ef240 RBP=ffffffff879ef200 RSP=ffff88806ce09c90 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000064 R13=0000000000000064 R14=ffffffff879ef200 R15=dffffc0000000000 RIP=ffffffff822d97f8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4ad5d51700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d122000 CR3=000000004a9ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffffbfff0aceb02 RBX=0000000000000001 RCX=ffffffff81273138 RDX=fffffbfff0aceb02 RSI=0000000000000008 RDI=ffffffff85675808 RBP=fffffbfff0aceb01 RSP=ffff888050b5f9d0 R8 =0000000000000000 R9 =ffffffff8567580f R10=fffffbfff0aceb01 R11=0000000000000001 R12=ffffffff84ff8c20 R13=0000000000000010 R14=0000000040000000 R15=ffff888051668a50 RIP=ffffffff816c90c7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe77449a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d025000 CR3=000000001b368000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000